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I.  INTRODUCTION 

A.   BACKGROUND 

Future   systems  will  provide  the  pilot  with   information 

rather   than   raw  data.   This  information  will   probably  be 

presented   to  the  pilot  in  the  form  of  situation   reporting, 

presentation   of  the  options,   and   probabilities   connected 

with   various  courses  of  action  [Ref.   1:   p.   28].  James   A, 

Guffy,   unit  chief,   Advanced  AI  Technology  Concepts,  stated 

[Ref .  2:  p. 66 ] : 

The  way  it  stands  now,  a  pilot  is  often  drowning  in 
data  but  is  starved  for  information,  That's  the  problem 
the  Pilot's  Associate  program  was  created  to 
address.  Its  role  is  to  increase  the  pilot's  decision- 
making capability  and  improve  mission  effectiveness. 

The   need  for  an  improved  decision-making  capability   is 

evident  from  aircraft  accident  statistics.   The  cause/factor 

elements   involved  in  aircraft  accidents  may  be  grouped  into 

three  general  categories: 

(  1  )  Environmental  extreme. 
(  2  )  Material  failure. 
(  3  )  Human  error. 

Environmental   extremes   are   usually  external   to   the 

cockpit  and  beyond  the  pilot's  control.   Material   failures 

are   hardware   malfunctions  and  structural   failures.   Human 

errors  are  procedural  and  judgmental  errors,  not  necessarily 

by  the  pilot.   Errors  on  the  part  of  the  designer   or   air 


traffic  controller  are  certainly  human.  However,  pilot  error 

is  cited  most  often  [Ref  3:  p. 13]. 

Human(pilot)    errors   can   be   partitioned   into    five 

categories  [Ref  4:  p. 71: 

(  1  )  Retroactive  Interference  -  The  action  of  the 
individual  is  not  identified  with  the  problem  at 
hand.  This  is  motivated  by  an  assimilation  of  prior 
input  into  an  onqoinq  program. 

(  2  )  Reductive  Coding  -  An  overload  of  input  or  a  complex 
stages  of  events,  precludes  the  correct  handling  or 
the  situation. 

(  3  )  Psychological  Refractory  Phase  -  The  human  unit 
receives  the  input.  However,  a  simultaneous 
transference  of  this  information  does  not  occur. 
There  is  a  segment  of  time  between  the  input  and 
output,  leaving  a  window  open  to  information  loss  or 
personal  interpolation  of  an  event  or  incoming  data. 

(  4  )  Inferential  Shortcomings  -  Application  of  knowledge 
structures  and  heuristics  to  a  situation  for 
supposition  of  data  which  is  non-existent.  In  short 
human  error  due  to  assumption. 

(  5  )  Leadership  and  Crew  Coordination  -  Protocol  and  the 
social  hierarchy  of  the  aircraft  are  examined  in 
reference  to  their  role  in  the  cockpit  environment. 

A  single  element  or  a  combination  of  these  elements  could 
invoke  an  error. 

The   pilot  of  an  aircraft  is  tasked  with  monitoring  many 

gauges   in  the  cockpit.   A  system  such  as  the   one   proposed 

could  improve  pilot  effectiveness  to  some  degree  in  all  five 

categories   listed  above,   particularly   in  the  areas   of 

reductive   coding  and  inferential  shortcomings.   The  system 

continuously  monitors  the  gauges  and  is  kept  abreast  of  the 

aircraft   systems  they  represent.   In  case  of  an   emergency, 

any  problem  that  is  presented  to  the  pilot  is  also  presented 


to   the   system.   Recommended  actions  are   returned   to   the 
pilot,   by  the  system,   for  cross  reference  or  confirmation. 

B.  OBJECTIVE 

The   overall  objective  is  to  raise  to  a  higher  level  of 

abstraction   the  real-time  performance  data  available  to  the 

pilot,   utilizing   artificial  intelligence   techniques.   The 

objectives  in  particular  are  as  follows: 

(  1  )  Show  that  useful  information  can  be  provided  to  the 
pilot,  in  terms  of  procedural  recommendations  and 
diagnosis,  rapidly  with  the  existing  sensor  input. 

(  2  )  Quantify,  through  implementation,  the  amount  of 
information  processing  necessary  to  sufficiently 
define  the  aircraft  emergencies  [Ref  5:  p. 2]. 

(  3  )  Show  che  feasibility  of  a  system  with  multiple 
knowledge  bases. 

(  4  )  Show  that  means-ends  analysis  is  an  appropriate 
problem  solving  formalism  on  which  to  solve  the 
problem. 

C.  SCOPE 

This   system   is   implemented  around  the   United   States 
1 
Marine  Corps  AH-1T   helicopter.   It  demonstrates  the  ability 

of  this  problem  solving  paradigm  to  diagnose  compound 

aircraft   emergencies   and   present  recommendations   to   the 

pilot,  in  the  context  of  the  objectives  stated  above.  Twenty 

categories   of   inflight  emergencies,   for   the   AH-1T,   are 


1 
The   AH-1T   is   a  tandem  seat,   two   place   (pilot   and 
copilot/gunner)   twin  engine  attack  helicopter   manufactured 
by  Bell  Helicopter  Textron. 
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1 

listed   in  the  NATOPS  Plight  Manual    One   category,   engine 
malfunctions,  is  concentrated  on. 


D.  ASSUMPTIONS 

Three   assumptions   have   been   made   to   simplify 

implementation : 

(  1  )  No  discrepancies  exist  between  the  gauges  and 
caution  lights.  Caution  lights  illuminate  to  show 
fault  conditions.  They  are  housed  together  in  a 
cluster  called  a  master  caution  panel.  It  is 
assumed  that  these  lights  are  not  faulty. 

(  2  )  All  indications  presented  to  the  pilot  are 
correct.  As  a  result  of  this,  no  emergency  is 
caused  by  a  faulty  gauge. 

(  3  )  The  aircraft  is  operating  in  the  high  altitude 
environment . 

E.  MATERIALS  AND  EQUIPMENT 

The  design  was  implemented  in  Turbo  Prolog  [Ref.6    p.l] 
on  an  IBM  AT  computer. 


1 
The  NATOPS  Flight  Manual  is  issued  by  the  authority  of 
the  Chief  of  Naval  Operations  and  under  the  direction  of 
Commander,  Naval  Air  Systems  Command  in  conjunction  with  the 
Naval  Air  Training  and  Operating  Procedures  Standardization 
(NATOPS)  Program.  This  manual  standardizes  ground  and  flight 
procedures  based  on  professional  knowledge  and  experience. 
Compliance  with  this  manual  is  mandatory  except  where  stated 
within  the  manual. 
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II .  SUMMARY  OF  CURRENT  KNOWLEDGE 

A.   INDUSTRY 

Substantial   emphasis   in  AI  developments   to   date   has 

remained   in  the  military/industrial  area. 

Accelerating  activity  in  artificial  intelligence  and 
expert  systems  is  pressing  researchers  to  take  a  long  look 
ahead  toward  real-world  applications  in  a  variety  of 
aerospace  systems,  where  the  technology  holds  promise  of 
enhancing  human  capabilities.  [Ref  2:  p. 40] 

One  major  driver  is  the  funding  and  research  base 
provided  by  the  Defense  Advanced  Research  Projects  Agency's 
(DARPA)  Strategic  Computing  Initiative  and,  more 
specifically,  particular  areas  targeted  by  DARPA  for  initial 
technology  applications  [Ref. 7   p.  46]. 

1.   Pilot  Aids 

Development     of    the    Pilot's    Associate,     an 

intelligent,   personalized  airborne  system,   has  moved  ahead 

significantly  with  award  of  three-year  Phase  1  contracts   to 

two   industry   teams   headed   by  Lockheed-Georgia   Co.   and 

McDonnell  Aircraft  Co.   [Ref. 8   p.   34].   Initially,  it  will 

consist  of  four  interactive   expert  systems  [Ref. 4:   p. 47]: 

(  1  )   A   Situation   Assessment   Manager  to   assess   the 

external  environment  as  well  as  internal  resources. 

(  2  )  A  Tactical  Planning  Manager  to  recommend  optimum 
tactical  employment  of  the  aircraft,  given  mission 
objectives  and  restrictions. 

(  3  )   A   Mission  Planning  Manager  to  refine  and  redefine 
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mission    objectives,    given   current    situation, 
command,  and  intelligence  inputs. 

(  4  )  A  System  Status  Manager  to  monitor  and  diagnose 
total  system  health  and  current/projected  status 
of  all  on-board  systems. 

Texas   Instruments   research  included  development  of   an 

emergency   procedures   expert   system   (EPES),   focusing   on 

aiding   pilots   of  USAF/General  Dynamics   F-16   fighters   in 

certain  multiple  emergency  situations  [Ref.3   p. 39]. 

2 .  Maintenance  Expert  System 

McDonnell  Douglas  Aircraft  Corp.  has  conducted 
flight  tests  of  an  avionics  integrated  (AIMES)  maintenance 
expert  system  aooard  a  Mavy/Mcdcnnell  Douglas  5YA-18.  During 
operation,  AIMES  monitors  the  aircraft's  mission  computers 
for  avionics  failure  indications  and  records  general  data 
from  suspect  avionic  boxes.  The  expert  system  then  generates 
queries  based  upon  the  general  data.  Tests  are  performed  by 
the  system  to  determine  the  validity  of  the  queries  and  a 
conclusion  concerning  the  failure  is  reached.  During 
interrogation  the  system  can  provide  the  fault  data,  name 
the  avionics  card  that  has  failed,  and  detail  the  reasoning 
that  lead  to  the  fault  isolation  conclusion  [Kef. 2   p. 60]. 

3 .  Space   Station   Operations 

The  Boeing  Aerospace  Co.  is  addressing  expert 
systems  in  space  station  operations,  and  expert  systems  as 
pilot  decision  aids.  Expert  systems  development  for  the 
manned   space   station   is   focused   on   the   automation   of 
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housekeeping  functions,  one  of  which  is  electrical  power 
control,  with  emphasis  on  fault  detection  and  isolation  and 
energy  management.  The  system  is  optimized  for  diagnosing 
multiple  or  simultaneous  faults.  In  pilot  decision  aids, 
Boeing  is  applying  expert  systems  technology  to  the 
pictorial  format  cockpit  display  it  is  developing  for  the 
Air  Force  Systems  Command's  Aeronautical  Systems  Div.  The 
display  system,  called  the  crew  information  manager,  will 
use  picture  symbols  instead  of  numbers  to  present  real-time 
flight  and  mission  information  for  all-weather  operations  in 
a  variety  of  military  aircraft.  Soeing  expects  that:  work  on 
the  system  will  continue  under  OARPA's  Pilot's  Associate 
program   when  the  current  contract  expires  [Ref.2:   p. 79  1. 

B.   AC AD EM I A 

Planners  are  but  one  of  many  types  of  expert  systems. 
The  expert  system  proposed  in  this  paper  is  of  the  planner 
type.  There  are  four  basic  approaches  to  planning: 
hierarchical,  non-hierarchical,  script-based,  and 

opportunistic, 

1.  Non-hierarchical   Planners 

Hierarchical  is  interpreted  as  having  a  hierarchy  of 
representations  of  a  plan  in  which  the  highest  is  a 
simplification,  or  abstraction,  of  the  plan  and  the  lowest 
is  a  detailed  plan,  sufficient  to  solve  the  problem.  A  non- 
hierarchical   planner  develops  a  sequence  of  problem-solving 
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actions  to  achieve  each  of  its  goals  and  usually  has  only 
one  representation  of  a  plan.  Some  examples  of  non- 
hierarchical  planners  are  STRIPS  [Ref.10  p. 523]  and  HACKER 
[Ref.10  p. 531].  HACKER  generates  initial  plans  that  violate 
ordering  constraints  and  then  tries  to  go  back  and  them. 
This  is  based  on  a  Linearity  assumption,  which  is  that 
subgoals  are  independent  and  thus  can  be  sequentially 
achieved  in  an  arbitrary  order.  The  Linearity  assumption  is 
used  in  cases  where  there  is  no  a  priori  reason  to  order  one 
operator  ahead  of  another  [Ref.10:  p.  520].  This  assumption 
could  not  be  made  for  this  implementation.  The  actions  taken 
by  the  pilot  must  be  ordered  and  thus  the  recommendations  to 
the  pilot  by  the  system  must  be  ordered.  A  characteristic 
of  non-hierarchical  planners  is  the  inability  to  distinguish 
between  the  relative  importance  of  recommended  actions. 

Means-ends  analysis  is  often  used  in  non-hierarchical 
planners  [Ref.10:  p.  517],  but  is  also  considered  by  many  to 
be  a  hierarchical  itself.  Means-ends  is  appropriate  when  it 
is  known  how  each  problem-solving  operator  changes  the  state 
of  the  world  and  knows  the  preconditions  for  an  operator  to 
be  executed  [Ref.10:  p.  524].  Operators  or  actions  are 
selected  according  to  their  ability  to  reduce  the  observed 
difference  between  the  current  state  and  the  goal  state. 
[Ref.5:   p. 147]. 

.  .  .  to  select  these  operators,  means-ends  analysis  must 
be  provided  with  a  table  listing  the  best  operator  for 
classes   of  states.   These  tables  refer  to  the   difference 
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between  the  current  state  and  the  goal  state,  and  are  thus 
called  difference  tables. 

Difference  tables  provide  a  way  of  decomposing  a  hard 
problem  into  simpler  sub-problems  recursively,  thus  making 
means-ends  a  recursive  search.  Means-ends  analysis  is  also 
called  hierarchical   reasoning.    [Ref.ll:   p.  11.1] 

2 .  Hierarchical  Planners 

Hierarchical  planners  utilize  a  hierarchy  of 
representations  of  a  plan  and  are  designed  to  solve  some  of 
the  problems  with  nonhierarchical  planners.  Examples  arp 
NOAH  [Ref.10  p. 541],  MOLGEN,  [Ref.10  p. 551]  and  ABSTRIPS 
[Ref.10  p. 523].  First  a  plan  is  sketched  out.  The  initial 
sketch,  even  though  complete,  is  usually  vague.  Those  parts 
that  are  vague  are  refined  into  more  detailed  sub-plans 
until  finally  the  plan  has  been  refined  to  a  complete 
sequence  of  detailed  problem-solving  operators.  The  major 
advantage  to  this  is  that  it  provides  a  means  of  ignoring 
the  details  that  obscure  or  complicate  a  problem  [Ref.10  p. 
517].  Because  these  planners  are  able  to  represent  a  problem 
at  different  levels  of  abstraction,  they  tend  to  be  very 
elaborate  but  effective  planning  models. 

3 .  Script-Based  Planners 

The  script-based  method  utilizes  stored  plans  which 
contain  the  outlines  for  solving  different  kinds  of  problems 
over  a  range  of  classes.  One  of  the  MOLGEN  systems  was 
implemented  in  this  manner.  First  a  skeleton  plan  is  found 
that  is  applicable  to  the  given  problem.  Then  the  abstract 
steps   in   the   plan   are   filled   in   with   problem-solving 
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operators  from  the  particular  problem  context.  If  this  can 
be  done  for  each  abstracted  step,  then  the  plan  as  a  whole 
will  be  successful  (Ref.10:  p.  518].  Operators  are  not 
ordered  until  constraints  are  available  to  guide  ordering. 
This  eliminates  premature  commitment  that  could  cause  a 
conflict  with  other  parts  of  the  plan.  Scripts  are  not  well 
suited  to  diagnosis  of  compound  amergencies  oecause  all 
scripts  can't  be  anticipated  and  thus  pre-written. 
4 .   Opportunistic  Planners 

Opportunistic  planners  are  different  from  those 
discussed  thus  far.  Operators ,  or  steps  in  the  plan  are 
introduced  vnenever  the  opportunity  arises.  This  contrasts 
greatly  wi~n  che  least  commitment  strategies  in  MOAH  and 
MOLGEN.  Another  characteristic  of  these  planners  is 
multidirectionality.  Planning  takes  place  on  several  levels 
simultaneously. 

CRYSALIS  is  an  example  of  an  opportunistic  planner. 
It  uses  a  blackboard  type  data-structure  to  represent  the 
complex  control  structure  of  human  planning.  This  involves 
having  a  number  of  specialist  programs  that  produce 
hypothesis  about  data  posted  on  the  blackboard.  These 
hypotheses  are  available  to  all  other  specialists. 

The  blackboard  is  divided  into  planes.  Planes  are 
organized  to  reflect  characteristic  processes  in  planning. 
The  five  categories  of  planes  are  (a)  the  plan  plane  which 
is  the  actual  plan  or  executive  decisions;  (b)  the  meta-plan 
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plane  contains  information  on  the  general  approach,  such  as 
designating  means-ends  or  some  other  approach;  (c)  the  plan 
abstraction  plane  which  contains  desirable  actions  in 
general,  and  controls  the  plan  plane;  (d)  the  knowledge-base 
plane  which  contains  world  or  external  knowledge;  and  (e) 
the  executive  plane  schedules  the  planning  decisions  made  by 
the  blackboard  [Ref.10:   p.  253. 

The  disadvantage  of  this  method  is  that  it  is  more 
likely  to  rewrite  parts  of  its  plan  or  change  its  goals  than 
is  a  hierarchical  planner.  This  taKes  up  valuable  time  wnen 
dealing  with  real-time  constraints. 
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III.  CONCEPT  OF  THE  PLANNER 

This  planner  is  passive  taking  no  action  on  its  own.  Its 
recommendations  to  the  pilot  would  appear  on  a  digital 
display  on  the  instrument  panel.  This  system  could  be  a 
replacement  for,  or  supplement  to,  the  master  caution  panel. 

The  planner  is  autonomous  in  detecting  its  own  goals 
based  on  the  current  state  description,  rather  than  simply 
having  the  goals  handed  to  it.  The  system  initializes  the 
goals  to  the  empty  list,  and  checks  the  gauges  and  caution 
lights  for  the  initial  establishment  of  goals.  Any 
fluctuations,  increases  or  decreases  in  component  status, 
require  a  response. 

A  means-end  control   structure   does  several  things: 

(  1  )  Means-ends  analysis  attempts  to  reduce  the 
difference  between  the  current  state  and  the  goal 
state . 

(  2  )  Subgoals  are  created  via  problem  reduction. 

(  3  )  Planning  is  incorporated  by  deferring  actions  until 
after  the  overall  solution  path  is  established. 

A.   KERNEL 

The  means-ends  control  structure  was  written,  in  prolog, 
by  Dr.  Neil  C.  Rowe  [Ref.ll  p. 11. 3].  This  control 
structure,  and  the  process  of  goal  acquision,  make  up  the 
The  kernel  of  the  planner.  Once  the  goals  have  been  acquired 
and  resolved,   the  facts,  in  a  knowledge-base  set  along  with 


19 


means-ends-analysis,  are  used  to  satisfy  these  goals.  As 
with  most  expert  systems,  the  size  of  the  kernel  is  small  in 
comparison  to  the  facts  in  the  knowledge-base. 

B.   KNOWLEDGE-BASE  SETS 

The  planner  consists  of  multiple  knowledge-base  sets 
that  enable  it  to  efficiently  satisfy  goals  and  to 
appropriately  respond  to  different  requirements  in  different 
flight  regimes.  A  knowledge-base  set  consists  of: 

(  1  )   Recommended  operators  for  achieving  goals. 

(  2  )   The  preconditions    for  the  usage  of  operators. 

(  3  )  The  eff ects ( postconditions )  on  the  state 
description  as  a  result  of  the  application  of 
operators . 

The  partitioning  of  the  knowledge-base  is  critical  to 
both  efficiency  and  correctness.  What's  recommended  for  a 
goal  in  a  high  altitude  environment  could  be  different  from 
that  in  a  low  altitude  environment.  As  a  result,  different 
knowledge-base  sets  are  required. 

The   concept   of   multiple  knowledge-base   sets   is   very 
similar   to  an  air  traffic  controllers'  handling  of   aircraft 
in  different   control  sectors.   Once  the  aircraft  leaves   a 
given  knowledge-base  set's  domain,  a  different   knowledge-base 
set   is   asserted. 

A  response  to  an  emergency  in  a  helicopter  is  in  many 
cases   predicated   on  the  aircraft's  altitude  and   airspeed. 
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Domains  defined  in  terms  of  altitude  or  airspeed  can  be  made 
active  when  the  aircraft  enters  its  domain. 

Although  this  system  requires  multiple  knowledge-base 
sets,  only  one  is  implemented.  Only  the  knowledge-base  would 
need  to  be  changed  to  adapt  it  to  another  aircraft. 
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IV.  IMPLEMENTATION  OF  THE  PLANNER 

This  chapter  describes  what  techniques  were  used  to 
construct  the  planner  and  why  this  particular  implementation 
was  chosen. 

A.  PROGRAMMING  LANGUAGE 

Lisp   is   the  most  widely  used  programming   language   in 

artificial  intelligence  today.  However,  Prolog,  a  relatively 

newer  language,  is  gaining  in  popularity. 

Prolog  has  three  positive  features  that  give  it  key 
advantages  over  Lisp.  First,  Prolog  in  syntax  and 
semantics  is  much  :ioser  to  formal  Logic.  The  programs  are 
better  understood  and  better  maintained.  Second,  Prolog 
provides  automatic  backtracking,  a  feature  that  simplifies 
the  writing  of  search  routines.  Third,  Prolog  allows  a 
procedure  definition  to  be  used  for  many  different  kinds 
of  reasoning  by  allowing  the  designated  input  and  output 
parameters  to  vary  from  call  to  call.  [Ref.ll:   preface] 

The  availability  of  a  Prolog  compiler  for  the  IBM  AT  was 

a  very  important  factor  in  this  implementation.  The  run  time 

required    to   provide   the   recommended   operators   for    a 

prescribed   goal  was  of  great  interest.   Turbo  Prolog  is  one 

of  the  fastest  of  the  implementations  developed  for  the   IBM 

AT  and  compatibles  [Ref.12:   p.  2541. 

B .  APPROACH 

First,  it  is  necessary  to  discuss  the  data  types  and 
symbols    used  in  the  program. 
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The   caution  panel  cluster  is  represented  by  symbols  each 
corresponding   to  a  single  caution  light  or  segment   in   the 
cluster.   A  list  of  these  segments  is  a  segment_list .   These 
segments  are  shown  in  Figure  4.1. 


segment  = 


engl_oi l_pzess 

engl_chip_detr 

engl_fuel_f liter 

dc_gen_l 

xmsn_chip_detz 

temp_press_90 

chip_detr_90 

xmsn_oil_hot 

c_box_oil_press 

hyd_pzess_l 

hyd_temp_l 

ac_main 

engl_gov_man 

fire_l_pull 

rpm_rotor_low 

rpm_ngl 

xmsn_oil_byp 


eng2_oil_press 

eng2_chip_detr 

eng2_£uel_£il ter 

dc_gen_2 

c_box_chip_detr 

temp__press_42 

chip_detz_42 

xmsn_oi Impress 

c_box_oil_hot 

hyd_press_2 

hyd_temp_2 

ac_stby 

eng2_gov_man 

flre_2_pull 

rpm_r  o  tor_h  i  gh 

zpm_ng2 


Figure  4.1    Segment  Symbols  Representing  Caution  Panel 

A  partial  state  description  of  the  aircraft  and  its 
environment  at  any  given  time  is  defined  in  terms  of 
state_elements .  A  list  of  state  elements  is  a  state_list. 
State  elements  are  shown  in  Figure  4.2 

1 .   Goal  Acquisition 

The   problem  solver   has  access  to   the   instruments 
and   caution   lights   and  evaluates  them  in  terms   of   their 
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status,  i.e.  high,  low,  erratic  etc.  Any  changes  in  status 
are  flagged  as  requiring  a  response .  The  aircraft's 
instruments  are  referred  to  as  components.  However,  a 
component  is  defined  as  being  any  of  the  symbols  listed  in 
Figure  4.3. 


state _element    = 

full (component )  landing_zone (zone_quality) 

metal_particles (component)    automat ic ( component ) 
manual (component )  idle (component ) 

normal (component )  decrease (component ) 

failed (component)  hot (component) 

on(component )  engaged (component ) 

off (component )  fire (component ) 

gross_weight (wt_class )  airspeed (knots ) 

altitude (ft)  oat ( component _status ) 

land(type_landing)  oil_bypassing_cooler 

left_yaw  fuel_obstruction(component ) 

power (component_s tat  us )      fuel _pr ess ( component  _status ) 
ammeter ( component ,component_s tat  us) 
revs(   component,    component_status) 
oil_press(   component,    component_status) 
oi!_temp(  component,  component_status    ) 
torque (    component,    component_status    ) 
pr e par e_f or _f a i 1 ure ( component) 
itt (component, component_status) 


Figure  4.2    State  Elements 

The  goals  are  generated  by  scanning  each  caution 
light  segment  in  the  master  caution  panel  and  each 
instrument,  as  seen  by  the  pilot.  For  each  caution  light 
there  is  a  set  of  goals.  Prior  to  assertion,  the  goals  are 
checked   against   all  the  other  goals   asserted   previously. 
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Duplicates,  and  goals  which  are  subordinate  to  previous 
goals  (In  its  class),  are  not  retained.  Classes  of  goals  are 
defined  by  priority  sets  which  list  explicitly  the  relative 
priority  of  each  goal  in  a  given  class.  If  a  goal  of  a 
higher  priority  has  been  asserted,  no  lower  priority  goals 
will  be  asserted.  Figure  4.4  shows  an  example  of  the 
relative  priority  between  power  status  values.  In  most:  cases 
a  specific  goal  belongs  to  only  one  class  or  (set).  The 
majority  of  the  priority  sets  contain  only  one  goal. 


component:   -= 


anql  enq2  xmsn 

c_dox  eng_oi Impress  qenl 

gen  2  govl  gov2 

master_caution  master_arm  ecu 

seas  fuel  fuell 

£uel2  £uel_press  throttlel 

throttle2  oil_temp_90  oil_press_90 

oil_temp_42  oil_press_42  gear_box_90 

geaz_box_42  c_box_oil_temp  c_box_oll_press 

xmsn_oil_temp  xmsn_oil_press  hyd_sys_l 

hyd_sys_2  hyd_pzess  hyd_temp_l 

hyd_temp_2  rotor  ngl 

ng2  itt_l  itt_2 

nfl  nf2  rain_rmv 

power  main_inverter  standby_inverter 


Figure  4.3    Aircraft  Component  Symbols 

A   component    is   described   in    terms    of    its 
component_status.      One   or   more  of   eight   possible   status 
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values  may  apply  to  a  given  component.  The  goals  generated 
by  the  planner  must  be  free  of  conflicts.  A  possible 
conflict  exists,  for  a  given  component,  when  two  or  more 
status  values  are  true  at  the  same  time.  These  status  values 
are  prioritized  by  facts  in  the  knowledge  base  via  a 
prioritized  status_list,  which  is  a  list  of  component  status 
symbols.  Component  status  values  are  shown  in  Figure  4.4. 


component __status    = 

none  high  low 

increase      decrease  ok 
erratic        respond 

pr  ior  ity_set ( [ power ( none ) ,  power ( low) , 

oower (decrease ) ,  oower ( increase ) ] ) 


Figure  4.4    Component  Status  Values 

At  the  highest  level  of  abstraction,  the  goals  passed 
to  means-ends  are  merely  to  respond  to  a  given  gauge.  The 
state_list  is  then  searched  for  the  specific  status  of  the 
component.  The  respond  status  is  slightly  different  from  the 
other  quantifying  and  mutually  exclusive  status  labels  such 
as  low,  high  etc.  For  a  given  component,  the  status  respond 
can  co-exist  with  a  high  or  low  component  status  in  the 
current  state  description. 
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2.   Organizing  the  Search 

The  order  in  which  goals  are  selected  from  a  goal 
list  to  be  satisfied  is  driven  by  the  order  of  the 
recommended  facts.  The  most  important  goals  are  placed 
first.  If  there  is  more  than  one  recommended  operator  that 
applies  to  a  given  goal  then  those  operators  are  ordered 
according  to  the  urgency  of  the  operator.  An  example  of  such 
recommended      facts  are  shown  in  Figure  4.5. 

Recommended    facts  with  multiple  goals  should  have  the 
goal  that  is  least  likely  to  be  satisfied  first  in  its  goal 
list.   Search   time  can  be  reduced  by   explicitly   including 
predicted  response  groups  into  the  recommended  structure.  An 
example  of  this  is  the  conf irm_dual_eng_failure   operator. 


recommended (    State,    [ revs (ngl, respond ) , 

revs(ng2, respond) ,    off(genl), 
o££(gen2) ,    off(engl),    o££(eng2) , 
land(pract) ] ,    con£irm_dual_eng_£ailure) 

recommended(    State,  [ torquefengl,    respond) J, 
conf irm_nfl_f allure) . 

recommended(    State,    [torque (engl,    respond) ] 
check _ngl_over speed) . 

recommended (    State,    [torque(engl,    respond) ] 
check_ngl_underspeed) . 


Figure  4.5   Recommended  Facts 
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Grouping  multiple  goals  in  one  recommendation 
reduces  the  number  of  times  a  given  operator  is  invoked 
unnecessarily.  However,  this  should  not  be  u  substitute  for 
the  single  goal  recommended  facts.  Single  goal  recommended 
facts  are  the  finest  granularity  of  the  search  process. 

The  output  of  this  planner  is  to  present  the 
operators  to  the  pilot  as  recommendations  to  satisfy  an 
immediate  goal.  A  list  of  these  operators  are  referred  to  as 
an  op_2ist.  Operators  are  shown  in  Figure  4.6. 


operator   = 

normal _approa ch 

slope_landing 

steep_approach 

high_speed_approach 

ma x_we i gh t _1 a nd i n g 

slidlng_landing 

pract_landing 

pr  act  __landing_outrankedl 

pract_landing_outranked2 

pos_landingl 

pos_landing2 

pos_landing_outranked 

autorotation 

check_ngl_over speed 

check _ngl_under speed 

check _ng2_over speed 

check _ng2_under speed 

genl_o££ 

gen2_off 


master_arm_of f 

conf irm_dual_eng_£ailure 

conf lrm_engl_£a ilure 

con£irm_eng2_£ailure 

engage_scas 

ecu_o££ 

rain_rmv_o££ 

govl__to_manual 

gov2_to_manual 

go  vl_t  o_a  u  t  oma  tic 

go v2_t o_a u t oma tic 

con£irm_n£l_£a i 1 ure 

con£irm_n£2_£a ilure 

throttlel_idle 

throttle2_idle 

check _genl_£a i 1 ure 

check_gen 2_£a ilure 

engl_o££ 

eng2_off 


Figure  4.6   Recommended  Operators 
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There  are  nine  different  landing  profiles  and 
emergencies.  A  landing  as  a  result  of  a  malfunction  could  be 
described  as  land  as  soon  as  practical,  soon  as  possible,  or 
a  landing  via  autorotation.  With  the  exception  of  an 
autorotation,  landings  are  a  function  of  aircraft  wt_class 
or  landing  zone_quali ty.  Landing  profiles  and  classes  are 
shown  in  Figure  4.7. 


*t_zlass    = 

heavy    ;    moderate 

zone_quality   = 

clear  ;  confined    ;    slope 

type _landing   = 

pract;    gos ;  auto; 

normal;    high_speed;    slope; 

sliding;   max_weight;    steep 

prior ity_set ( f land(pos ) ,  land (pract ) J ) . 


Figure  4.7   Landing  Profiles 

3.   Natops  to  Code  Translation 

The  NATOPS  manual  together  with  the  experience  of 
the  author  played  the  role  of  the  expert  for  this  system.  It 
was  necessary  to  translate  the  procedures  and  system 
information  contained  in  the  NATOPS  manual  into  a  knowledge- 
base.  Examples   of  this  translation  are  now  discussed.   In 


29 


each  example  the  indications  and  corrective  action  are  taken 
from  the  NATOPS  manual. 

The  first  example,  shown  in  Figure  4.8  describes  the 
initial   action  required  by  the  pilot  in  the  case  of  a   chip 


Caution   and   warning   light  -  INITIAL   ACTION 

Panel    wording:    CHIP   DETR 

Condition:    metal    particles    in   engine 

Corrective  Action:  Flight  idle.  Check  oil  pressure  and 
temperature .  If  normal  operate  at  reduce  power. 
If  pressure  is  low  and/or  temperature  is  high, 
shut  down  respective  engine.  Land  as  soon  as 
practical . 

This    information    is    coded    as    follows... 

caution_light(    State,      engl_chip_detr    ):- 
member (metal_particles (engl) ,    State    ), 
write (    "   Caution   light:    engl_chip_detr    "    ),nl, 
secondary ( State ,    engl_chip_detr ) . 

secondary  (State,    engl_chip_detr )    :- 

member ( oil_press (engl,    X    ),    State    ), 
below_limit(L) ,    status jmember (X,L) , 
create_goals( I    off (engl ), land (pract)]    ). 

secondaryi State,    engl_ch i p_de tr )    :- 

member ( oil _temp( engl,    high),    State    ), 
create__goals(  I    of  f  (engl ) ,  land  (pract )  )    ). 

secondaryf State,    engl_chip_detr)    :- 

create_goals( f  idle(throttlel) ,land(pract) ]    ). 


Figure  4.8  Translation  Example  I 
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detector  caution  light.  By  assumption,  caution  lights  and 
instruments  do  not  need  to  be  cross  checked.  In  this  example 
there  is  more  than  one  course  of  action.  Depending  on  the 
status  of  the  oil  pressure  and  temperature,  (secondary 
indications),  different  goals  are  asserted.  The  goals  that 
are  created  are  thus  a  function  of  the  primary ( caution 
light)  and  secondary  indications.  The  predicate  create_goals 
conditionally  asserts  the  goals  that  are  its  arguments  based 
on  goal  priority  and  duplication. 

Figure  4.9  shows  the  translation  of  a  definition  of 
a  power  turbine  governor  failure  into  code.  If  the  immediate 
goal  is  to  respond  to  the  torque  of  the  #1  engine  then  it 
would  be  recommended  to  check  the  #1  nf  governor.  If  a 
precondition  to  some  operator  is  that  the  #1  governor  be  in 
a  failed  state,  and  this  has  yet  to  be  proven,  then  the 
second  recommended  fact  would  be  used. 

The  indications  of  a  #1  nf  governor  failure  are 
represented  by  the  preconditions  listed  in  Figure  4.9.  If 
the  preconditions  are  true  then  nothing  will  be  deleted  from 
the  current  state  description  because  nothing  has  changed. 
Only  a  diagnosis  of  the  situation  has  been  accomplished. 
Nothing  has  been  done  about  it  at  this  point.  The  current 
state  description  is  amended  to  reflect  the  fact  that  the 
governor  has  failed  and  the  instruments  listed  in  the 
addpostcondition  fact  have  been  responded  to. 
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Power  Turbine  Governor  (NF)  Failure 
Indications. 

1.  Erratic  GAS  PROD  RPM  (Ng) . 

2.  Erratic  INLET  TEMP. 

3.  Fluctuating  ENG  RPM  (Nf). 

4.  abrupt  increase  in  ENG  RPM  (Nf)  above 
governed  value. 

5.  Abrupt  decrease  in  ENG  RPM  (Nf)  below 
governed  value. 

6.  Fluctuating  TORQUE. 

Procedure . 

1.  Affected  engine  -  IDENTIFY 

2.  Throttle  -  ENGINE  IDLE. 

3 .  GOV  -  MANUAL 

4.  Throttle  -  ADVANCE. 

5.  LAND  AS  SOON  AS  PRACTICAL. 

This  information  is  coded  as  follows... 

recommended (    State,     [torque (engl, respond) ] , 
conf irm_nf l_failure ) . 

recommended (  State,  I  failed (govl )] , 
con£irm_n£l_£ailure) . 

precondition^  State,    confirm_n£l_failure, 
[revs (ngl, erratic) ,    itt(engl, erratic) , 
revs (n£l, erratic) ,    torque (enql, erratic) , 
automat icfqovl ) ] ) 

deletepostcondltion(    State, 

con £irm_n£l_£ai lure, [ ] ) . 

addpostcond it ion (    con£irm_n£l_£ailure, 

[revs (nql, respond) ,    revs (n£l, respond) , 
£ailed(qovl) , t or  que ( en gl, res  pond) ] ) . 


Figure   4.9   Translation  Example  II 
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The  third  example,  a  single  engine  failure,  is  shown 
in  Figure  4.10.  When  an  engine  failure  occurs  the  rotor 
speed  decreases  somewhat  due  to  loss  of  power.  This  creates 
the  goal  revsfrotor,  respond) .  One  of  the  recommended 
operators  for  this  goal  is  con£izm_enql_£ail\2ze .  It  all  of 
the  preconditions  have  been  meet,  the  current  stace 
description  will  be  altered  by  the  addition  and  deletion  of 
facts  as  shown. 
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Single  Engine  Failure  (In  Flight). 

When  one  engine  fails,  rotor  speed  can  be  expected 
to  droop.  The  desired  rotor  rpm  can  be  regained  if 
sufficient  power  is  available,  by  using  the  engine 
RPM  switch.  After  rpm  is  regained  by  use  of  the  RPM 
switcn,  desired  rotor  rpm  can  be  maintained  by  the 
collective  control. 

INDICATIONS. 

1.  Left  yaw 

2.  RPM  caution  light  (gas  producer) 

3.  MASTER  CAUTION  light 

4 .  Rotor  rpm  decrease 

5.  3ngine  instruments  decrease 

{  engine_instruments  } 
b.  CAUTION  panel  lights 

This  information  is  coded  as  follows... 

recommended (    State, 

[revs (rotor , respond) ] ,      conf irm_engl_failure ) . 

precondition (  State,  conf irm_engl_fai lure, 
[ torque (engl,none ) ,    torque (xmsn, low) , 
revs (ngl, none ) ,    revs (nil, none) , 
oil_press (engl,none ) ,    failedfgenl ) r 
i tt (engl,none) ,    le£t_yaw,    on(fuell) , 
full (throttlel) ,    revsirotor ,low) ] ) . 

deletepostconditionf    State,      con£irm_engl_failure , 
[on(ecu) )    ) . 

addpostcond i t i on (    conf ir m_engl_f a i lure, 

I    off(ecu),failed(engl) ,revs (ngl, respond) , 
revs (nfl, respond) ,revs (rotor , respond) , 
itt(engl, res  pond ) , torque (engl, respond ) , 
torque (xmsn, respond) J ) . 


Figure  4.10   Translation  Example  III 
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V.  ANALYSIS  AND  CONCLUSIONS 

A.   ANALYSIS 

A  version  of  the  planner  was  tested  to  determine  the 
execution  time  of  the  various  test  cases.  Only  the 
intermediate  write  statements,  included  in  the  source  code 
in  appendix  D,  were  left  out.  These  times  are  interesting 
because  they  give  some  relative  measurement  to  the  costs  of 
the  various  aspects  of  the  planner.  The  response  times  for 
each  test  are  shown  in  Figure  5.1. 

Detailed  output  listings  of  tests  2,  3,  and  4,  can  be 
found  in  appendices  A,  B,  and  C  respectfully. 


TEST  I  TIME 

1  0.39  sec. 

2  1.82  sec. 

3  1.92  sec. 

4  2.53  sec. 


EMERGENCY 

none 

dual   engine   failure 

engine   §1   failure 

engine    #1  failure   and 
#2  Nf   governor   failure 


Figure  5.1   Test  Case  Response  Times 

1.   Test  1 

This   test   involved  no  goals.   It  did   provide   the 
amount    of   time   necessary   to   scan   the   current    state 
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description.  The  base  time  of  0.39  sec.  as  reflected  by  test 
#1  is  also  significant  because  this  determines  the  sampling 
rate  of  the  planner.  The  state  description  then  could  be 
sampled  approx.  150  times  per  minute.  The  longest  reaction 
time  is  experienced  when  a  component  failure  occurs 
immediately  after  a  sampling  of  the  current  state 
description.  This  means  as  much  as  0.8  sec.  could  elapse 
before  a  response  condition  would  be  acted  upon  by  the 
planner . 

2.  Test  2 

In  test  #2  only  four  operators  are  considered  and 
all  four  were  applicable.  Figure  5.2  shows,  through 
indentation,  the  nesting  levels  for  each  operator  invoked. 
Backtracking  occurs  when  the  indentation  is  reversed, 
and  no  backtracking  occurs  in  this  example.  This  is  the 
optimum  situation.  Here  the  planner  is  telling  the  pilot 
that  it  has  confirmed  a  dual  engine  failure  and  an 
autorotation  is  to  be  accomplished. 

3.  Test  3. 

In  this  case,  11  operators  were  tried  with  5  being 
applicable.  Figure  5.2  depicts  the  backtracking  that  occurs 
as  a  result  of  some  recommended  operators  failing  to  satisfy 
immediate  goals.  It  should  be  pointed  out  that  two  of  the 
operators,  confirm_eng2_failure  and  check_gen2_f allure,  were 
attempted  twice.  The  pilot  in  this  case  is  informed  that  the 
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TEST  #1 

■no  recommended  operators- 

TEST  #2 

confirm_dual_eng_failura 
oraci_landinq_outzankedl 
pos_landlng_outzankad 
autorotation 

TEST  13 

conf irm_eng2_failure 

zheck_gen2_failure 
conf  izrn_engl_f  a  i  1  uza 
engl_off 
genl_o£ f 
pract_land I ng_out ranked! 
oos_landing_out ranked 
auuorotation 
conf irm_eng2_f a i lure 
check_gen2_failure 
pos_landing 

TEST  #4 

conf irm_eng2_f ai lure 

check_gen2_failure 
conf izm_engl_£ allure 
conf izm_nf2_f allure 
engl_off 
genl_off 
pract_landing_outrankedl 
pos_landing_out ranked 
autorotation 
conf irm_eng2_failure 
check_gen2_f a i lure 
pos_landing 


Figure  5.2   Recommended  Operator  Selection 
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#1  engine  has  failed,   to  secure  the  #1  engine  and  generator 
and  to  land  as  soon  as  possible. 
4.   Test  4 

Here  12  operators  were  selected  with  6  being 
applicable.  Again,  two  of  the  operators, 
confirm_eng2_f allure  and  chec&_gen2_£ailure,  were  attempted 
twice.  In  addition  to  the  information  presented  to  the  pilot 
in  test  3,  the  pilot  is  informed  that  the  #2  nf-governor  nas 
failed. 

Governor   failures   are   not  as   straightforward   to 
diagnose  as  engine  failures.  As  a  result  this  information  is 
potentially  .uora  valuable. 
3.   Programming  Language 

Turbo  Prolog  is  not  considered  to  be  a  Clocxsin  and 
Hellish  PROLOG  as  most  others  are  (Re£.13  p. 334  1.  The  first 
major  difference  between  Turbo  Prolog  and  other 
implementations  is  the  required  use  of  Pascal-like  type 
definitions  for  parameters.  This  has  the  advantage  of 
catching  various  errors  at  compile  time,  and  also  allows  the 
compiler  to  generate  more  efficient  code.  The  drawback  is 
that  describing  generalized  procedures  can  sometimes  result 
in  multiple  definitions  of  a  rule  to  handle  different  types 
of  variables.  An  example  of  this  was  the  member  predicate. 
As  defined,  it  could  accept  as  arguments  a  state_element  and 
a  state_list.  However,  when  this  predicate  was  needed  to  be 
used  with  arguments  of  type  component_status  and  status_list 
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respectfully,  a  separate  definition  of  the  member  predicate 
had  to  be  defined  named  "status_memberM .  The  Pascal-like 
syntax  was  more  of  a  help  than  a  hindrance  and  greatly 
helped  in  the  debugging  process. 

B.   CONCLUSIONS 

Turbo  Prolog  proved  to  be  suitable  for  this  purpose  and 
the  timing  results  were  encouraging.  Useful  information  was 
rapidly  presented  in  the  form  of  diagnosis  and  recommended 
actions . 

Means-ends  proved  to  be  effective  because  the  structure 
of  the  task  was  well  suited  to  the  data  structure  of  the 
recommended  facts.  The  amount  of  information  processing 
required  to  satisfy  the  various  intermediate  goals  is 
reflected  by  the  number  of  recommended  operators  considered 
in  satisfying  the  immediate  goals.  All  of  the  facts  in  the 
knowledge-base  were  not  utilized  by  the  examples  exercised 
in  this  implementation. 

Translation  from  the  NATOPS  manual  into  a  knowledge-base 
was  straightforward  and  easily  verified.  In  employing 
multiple  knowledge-base  sets,  correctness  and  speed  of 
execution  can  be  maintained. 

It  is  conceivable  that  this  system  could  be  used  in 
place  of  the  existing  master  caution  panel  which  displays 
caution  light  information  only.  Perhaps  a  digital  display 
that   presents   graphically,    as   well   as   textually,   the 
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operators  and  actions  to  be  taken.  In  this  way  no  extra 
space  would  need  to  be  provided  for  this  system  in  the 
cockpit.  This  makes  this  feasible  for  use  in  existing 
aircraft . 

For  total  aircraft  system  implementation,  the  number  of 
operators  required  is  dependent  on  the  granularity  of 
information  provided  to  the  pilot.  Higher  levels  of 
abstraction  are  required  for  immediate  actions,  with  more 
detailed  instructions  provided  at  the  request  of  the  pilot. 
Different  help  levels  could  be  provided  by  switching  to  a 
specialized  knowledge-base.  This  implies  an  interactive 
capability  by  the  pilot  to  select  goals,  and  a  means  to  do 
so  would  need  to  be  provided. 

The  inflight  emergency  domain  requires  as  a  minimum  the 
following  domains:  Takeoff,  Low  altitude,  High  altitude, 
Night,   and  perhaps  instrument  conditions. 

This  system  potentially  lends  itself  to  practically  any 
application  within  the  aircraft.  The  task  of  piloting  an 
aircraft  is  very  well  defined  and  procedurized  and  could 
possibly  be  expanded  into  the  realm  of  normal  procedures  as 
well  as  emergency  procedures. 

C.   RECOMMENDATIONS 

It  is  recommended  that  a  full  implementation  be  built  to 
determine  the  number  of  knowledge-base  sets  needed  and  the 
scope  of  each. 
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Caution 
Caution 
Caution 
Caution 
Caution 
Caution 
Caution 


light 
light 
light 
light 
light 
light 
light 


APPENDIX  A 
DUAL  ENGINE  FAILURE  EXECUTION 


engl_oil_press 

eng2_oil_press 

dc_gen_l 

dc_gen_2 

rpm_rotor _low 

rpm_ngl 

rpm_ng2 


Goal  list  is:  [revs (ng2 , respond ) ,  revs ( ngl , respond ) , 
revs(rotor,respond ) ,  otr(gen2),    off(genl),    of£(eng2)/ 

land(pract ) ,  off(engl)] 

difference:  [revs (ng2 r respond ) ,  revs ( ngl , respond } , 
rsvs( rotor , respond ) ,  o£f(gen2),  off(genl),  off(eng2), 
iand(pract;,  off(engl)] 

current  operator:  conf irm_duai_eng_failure    depth  is:  1 
*********************************************** 

operator  preconditions  have  been  met 

items  being  deleted  are:  (on(ecu)l 

items  being  added  are:  toff(ecu),  failed (engl ) , 
failed(eng2) ,  off(genl),  off(gen2),  off(engl),  off(eng2), 
revs (ngl, respond ) ,  revs (nf 1, respond ) ,  revs (rotor ,respond ) , 
itt (engl,respond) ,  itt(eng2, respond ) ,  revs ( ng2, respond ) , 
revs (nf 2, respond ) ] 

Goal  list  is:  [revs (ng2, respond ) ,  revs (ngl, respond ) , 
revs ( rotor, respond) ,  off(gen2),  off(genl),  off(eng2), 
land(pract),  off(engl)] 

difference:  [ land( pract ) ] 
*********************************************** 

current  operator:  pract_landing_outrankedl    depth  is:  2 
*********************************************** 
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Goal  list  is:  (land(pos)l 

difference:  lland(pos)] 

*********************************************** 

current  operator:  pos_landing_outranked    depth  is:  3 
*********************************************** 

Goal  list  is:  [iand(auto)} 

difference:  tland(auto)] 

*********************************************** 

current  operator:  autorotation    depth  is:  4 
*********************************************** 

operator  preconditions  have  be&n   met 

items  being  deleted  are:   l full (throttlel ) ,  iull { throttle2 ) , 
airspeedf 100 ) ,    altitude ( 1000 ) ,  revs ( rotor , respond ) } 

items   being  added  are:   [ idle (throttlel ) ,   idle ( throttle2 ) , 
airspeed(0)/  alt i tude ( 0 ) ,  revs ( rotor , respond) , land (auto) ] 

operator  preconditions  have  been  met 
items  being  deleted  are:  (] 
items  being  added  are:  [land(pos)] 

operator  preconditions  have  been  met 
items  being  deleted  are:  [] 
items  being  added  are:  ( land ( pract )  ] 

operator  preconditions  have  been  met 


The  recommended  operators  are:  [conf irm_dual_eng_failure, 
autorotation,  pos_landing_out ranked, 

pract_landing_outrankedl 1 

The  final  state  description  is:  [oil_press (engl,none ) , 
oil_press(eng2,none ) ,  revs (rotor, low) ,  of f (rain_rmv) , 
of f (master_arm) ,     landing_zone (clear ) ,     full (throttlel) , 
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£ull(throttle2), 
automat ic(gov2) , 
torque (engl,none ) 
revs (ngl,none ) , 
revs (nf 2, none ) , 
failed(genl) ,   fa 
oil_temp(c_box,  ok 
oil_press( xmsn, ok 
f uel_press (ok ) , 
o  i l_press ( hyd_sys 
airspeed( 100 ) ,  al 


off (master_cautlon 

on(fuell),   on(fuel2 

,     torque (eng2, none 

revs (ng2, none ) , 

oil_temp(engl,ok ) , 

iled(gen2),  fulKfuel 

),  oil_press (c_box,ok 

),  ammeter (genl, none ) 

itt (engl,none ) , 

_l,ok),  oi 

titude(lOOO),  left_ya 


automatic (govl) 

normal ( f uel_press ) 

torque (xmsn, low) 

revs ( nf 1, none ) 

oil_temp(eng2, ok ) 

off(scas),  on(ecu) 

oil  _temp(xmsn, ok ) 

,  ammeter  (gen2,none) 

itt (eng2, none ) 

l_press ( hyd_sys_2 , ok ) 

w] 


), 
>, 
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APPENDIX  B 
SINGLE  ENGINE  FAILURE  EXECUTION 

Caution  light:  engl_oil_press 

Caution  light:  dc_gen_l 

Caution  light:  rpm_rotor_low 

Caution  light:  rpm_ngl 

Goal  list  is:  [revs (ngl, respond ) ,  revs (rotor , respond ) , 
off(genl),  land(pract),  off(engl)! 

difference:  [revs (ngl, respond ) ,  revs (rotor , respond ) , 
off(genl),  land(pract),  off(engl)] 

*********************************************** 

current  operator:  conf irm_eng2_failure     depth  is:  1 
*********************************************** 

Goal  list  is:  ( torque ( eng2, none ) ,  torque ( xmsn, low) , 
revs (ng2, none ) ,  revs (nf 2,none ) ,  oil_press (eng2,none ) , 
failed(gen2 ) ,  itt (eng2, none ) ,  left_yaw,  on(fuel2), 
full (throttle 2 ) ,  revs (rotor, low) ] 

difference:  [ torque (eng2, none ) ,  revs ( ng2, none ) , 
revs(nf 2, none ) ,  oil_press (eng2,none ) ,  failed (gen2 ) , 
itt (eng2,none) ] 

*********************************************** 

current  operator:  check_gen2_failure    depth  is:  2 
*********************************************** 

Goal  list  is:  [on(gen2 ) , ammeter (eng2, none ) ] 

difference :  [ on ( gen 2 ) , ammeter ( eng2, none ) ] 
*********************************************** 

current  operator:  conf irm_engl_failure    depth  is:  1 
*********************************************** 

operator  preconditions  have  been  met 
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items  being  deleted  are:  (on(ecu)l 

items  being  added  are:  loff(ecu),  failed (engl ) , 
revs ( ngl, respond) ,  revs(nf 1, respond) ,  revs (rotor, respond ) , 
itt( engl, respond) ,  torque (engl, respond), 

torque (xmsn, respond) ) 

Goal  list  is:  [ revs (ngl, respond ) ,  revs (rotor, respond ) , 
off(genl),  land(pract),  off(engl)) 

difference :  [of ft genl) , land (pr act ) , of f (engl) 3 

******************x*********x**********:«*x***** 

current  operator:  engl_off     depth  is:  2 

*************  ******x**x**x********x**£*xx****** 

operator  preconditions  have  been   net 

items  being  deleted  are:  Ion<engi>] 

items  being  added  are:  [off (engl)} 

Goal  list  is:  { revs ( ngi, respond) ,  revs t rotor , respond) , 
off(geni),  iantit pracr ) ,  off(engi)i 

difference:  (of f (genl) , land(pract ) ) 

*********************************************** 

current  operator:  genl_off    depth  is:  3 
*********************************************** 

operator  preconditions  have  been  met 

items  being  deleted  are:  (on(genl)l 

items  being  added  are:  (off (genl)) 

Goal  list  is:  ( revs (ngl, respond ) ,  revs (rotor, respond ) , 
off (genl),  land(pract),  off (engl)) 

difference:  ( land (pr act ) ) 
*********************************************** 

current  operator:  pract_landing_outrankedl    depth  is:  4 
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*********************************************** 

Goal  list  is:  [land(pos)] 

difference:  Iland(pos)] 

*********************************************** 

current  operator:  pos_landing_outranked    depth  is:  5 
*********************************************** 

Goal  list  is:  [land (auto)] 

difference:  [land(auto)] 

*********************************************** 

current  operator:  autorotation     depth  is:  6 
********  ********************  ********  *********** 

Goal  list  is:  i failed(engl ) , £ailad(eng2 ) 3 

difference:  [ failed(eng2 ) ] 
*********************************************** 

current  operator:  conf irm_eng2_failure    depth  is:  7 
*********************************************** 

Goal  list  is:  t torque (eng2, none ) ,  torque ( xmsn, low) , 
revs (ng2, none ) ,  revs (nf 2,none ) ,  oil_press (eng2,none ) , 
failed(gen2 ) ,  itt (eng2,none ) ,  left_yaw,  on(fuel2), 
f ull (throttle2 ) ,  revs (rotor , low) ] 

difference:  [torque (eng2, none ) ,  revs (ng2,none ) , 
revs (nf 2,none ) ,  oil_press (eng2,none ) ,  failed(gen2 ) , 
itt (eng2, none) J 

*********************************************** 

current  operator:  check_gen2_failure    depth  is:  8 
*********************************************** 

Goal  list  is:  [on(gen2 ), ammeter (eng2, none ) ] 
difference :  I  on (gen 2 ) , ammeter (eng 2, none ) ] 
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*********************************************** 

current  operator:  pos_landingl    depth  is:  5 
*********************************************** 

operator  preconditions  have  been  met 
items  being  deleted  are:  {alt itude( 1000 ) , airspeed* 100) J 
items  being  added  are:  I land(pos ), altitude ( 0 ) , airspeed ( 0 ) ] 

operator  preconditions  have  been  met 
items  being  deleted  are:  [) 
items  being  added  are:  ( land(pract ) J 

operator  preconditions  have  been  met 


The    recommended   operators   are:    (con£irm_engl_£ailure, 
engl_o£f,  genl_off,  pos_landingl,  pract_landing_outrankedl J 


The  final  state  description  is:  (oil_press(engi,none) 
oil_press(eng2,ok ) ,  revs(rotor , low) ,  off (rain_rmv) 
of f (master_arm) ,  land ing_zone( clear ) ,  f ull ( throttlel) 
f ull ( throttle2 ) ,  of f (master_caut ion ) ,  automatic ( govl ) 
automat ic ( gov2 ) ,  on(fuell),  on(fuel2),  normal ( f uel jpress ) 
torque (engl, none ) ,  torque ( eng2, ok ) ,  torque ( xrasn, low) 
revs (ngl, none ) ,  revs ( ng2,ok ) ,  revs ( nfl, none ) ,  revs(n£2/ok) 
oil__temp(engl,ok  ),  oil_temp(eng2,ok ) ,  failed(genl) 
full(fuel),  off(scas),  on(ecu),  oil_temp(c_box,ok ) 
oil_press(c_box,ok),  oil__terap(xmsn,ok),  oil_press(xmsn,  ok  ) 
ammeter (genl, none) ,  ammeter (gen2, ok) ,  f uel_press(ok) 
itt (engl, none) ,     itt(eng2,ok) ,  oil_press (hyd_sys_l, ok ) 

oiljpress(hyd_sys_2/ok)/  airspeed( 100) ,  altitude* 1000) 
lef t_yaw] 
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APPENDIX  C 
SINGLB  BNGINB  FAILURE  /  NP  GOVERNOR  PAILURB  EXECUTION 

revs(ng2,  erratic) 

revs(n£2,  erratic) 

torque(eng2/  erratic) 

torque (xmsn,  erratic) 

Caution  light:  engl_oil_press 

Caution  light:  dc_gen_l 

Caution  light:  rpra_rotor_low 

Caution  light:  rpm_ngl 

Goal  list  is:  t revs (ngl, respond ) ,  revs ( rotor , respond ) , 
otf(genl),  land(pract),  off(engl),  torque ( xmsn, respond ) , 
torque <eng2, respond ) ,  revs(n£ 2, respond ) ,  revs ( ng2, respond ) } 

difference:  { revs< ngl, respond ) ,  revs ( rotor , respond) , 
off(genl),  land(pract),  off(engl),  torque ( xmsn, respond ) , 
torque (eng2, respond ) ,  revs ( nf 2, respond ) ,  revs ( ng2, respond ) J 

*********************************************** 

current  operator:  conf irm_eng2_fai lure    depth  is:  1 
*********************************************** 

Goal  list  is:  ( torque (eng2, none ) ,  torque ( xmsn, low) , 
revs (ng2, none),  revs (n£2, none ) ,  oil_press(eng2,none ) , 
£ailed{gen2 ) ,  itt (eng2, none ) ,  le£t_yaw/  on(fuel2), 
£ull(throttle2),  revs (rotor, low) 1 

difference:  ( torque (eng2, none) ,  revs ( ng2, none ) , 
revs (n£2, none),  oil_press(eng2,none),  failed(gen2) , 
itt(eng2,none) ) 

*********************************************** 

current  operator:  check_gen2_failure    depth  is:  2 
*********************************************** 

Goal  list  is:  I on(gen2 ), ammeter (eng2, none ) 1 
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difference:  ton(gen2) , ammeter (eng2, none ) ] 
*********************************************** 

current  operator:  conf irm_engl_failure    depth  is:  1 

*********************************************** 

operator  preconditions  have  been  met 

items  being  deleted  are:  ion(ecu)] 

items  being  added  are:  {off (ecu),  £ailed(engl ) , 
revs (ngl , respond ) ,  revs (nf 1, respond ) ,  revs ( rotor , respond ) , 
itt (engi, respond ) ,  torque ( e ngl, respond ) , 

torque (xmsn, respond ) ] 

Goal  list  is:  C revs (ngl, respond ) ,  revs (rotor , raspond) , 
off(geni),  land( pract ) ,  off (engi),  torque t xmsn, r as pond ) , 
torque ( ang2, respond ) ,  revs ( n£2, respond ) ,  revs i ng2 , respond ) ] 

difference:  Coff(genl),  land(pract),  off(engl), 
torque ( eng2 , respond ) ,  revs (nf 2 , respond ) ,  revs ( ng2 , respond ) 3 

*********************************************** 

current  operator:  conf irm_nf 2_failure    depth  is:  2 
*********************************************** 

operator  preconditions  have  been  met 

items  being  deleted  are:  [] 

items  being  added  are:  Irevs(ng2, respond) , 
revs(nf 2,respond) ,  failed(gov2 ) ,  torque (eng2,respond ) 1 

Goal  list  is:  [revs (ngl,respond ) ,  revs (rotor , respond ) , 
off(genl),  land(pract),  off(engl),  torque (xmsn, respond ) , 
torque(eng2, respond) ,  revs (nf 2, respond ) ,  revs (ng2, respond ) ] 

difference :  [of f (genl) , land (pr act) ,of f (engl) ] 
*********************************************** 

current  operator:  engl_off    depth  is:  3 
*********************************************** 

operator  preconditions  have  been  met 
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items  being  deleted  are:  ton(engl) 1 
items  being  added  are:  {off(engl)) 

Goal  list  is:  I  revs (ngl, respond ) ,  revs (rotor, respond ) , 
off(genl),  land(pract),  off(engl),  torque (xmsn, respond ) , 
torque (eng2, respond ) ,  revs ( n£2, respond ) ,  revs( ng2, respond) 1 

difference:  (of f (genl) , land (pr act ) 3 

*********************************************** 

current  operator:  genl_off    depth  is:  4 

*********************************************** 

operator  preconditions  have  been  net 

items  being  deleted  are;  [on<genl)3 

items  being  added  are:  (o££(geni)3 

Goal  list  is:  I  revs ( ngl, respond) ,  revs ( rotor , respond) , 
off (genl),  land(pract),  off(engi),  torque < xmsn f respond ) , 
torque ( eng2 , respond ) ,  revs < nt2 , respond ) ,  revs ( ng2 , respond) 3 

difference:  I land(pract ) 1 

*********************************************** 

current  operator:  pract_landing_putrankedl    depth  is:  5 

*********************************************** 

Goal  list  is:  (land(pos)] 

difference:  (land(pos)l 
*********************************************** 

current  operator:  pos_landing_outranked    depth  is:  6 
*********************************************** 

Goal  list  is:  (land(auto)) 

difference:  (land(auto)] 
*********************************************** 
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current  operator:  autorotation    depth  is:  7 
*********************************************** 

Goal  list  is:  C failed(engl) , failed(eng2 ) ] 

difference:  I failed(eng2) ] 
*********************************************** 

current  operator:  conf irm_eng2_failure     depth  is:  8 
*********************************************** 

Goal  list  is:  (torque (eng2, none ) ,  torque (xmsn, low) , 
revs (ng2, none ) ,  revs(nf 2, none ) ,  oil_press (eng2, none ) , 
failed(gen2) ,  itt(eng2,none ) ,  left_yaw,  on(fuel2), 
£ull(throttle2),  revs (rotor, low) J 

difference:  C torque<eng2,none ) ,  revs (ng2, none ) , 
revs (nc2, none ) ,  oil_press(eng2,none ) ,  failed(gen2 ) , 
itt(eng2,none) 1 

*********************************************** 

current  operator:  check_gen2_failure    depth  is:  9 
*********************************************** 

Goal  list  is:  ( on (gen2), ammeter (eng2, none) 1 
difference:  (on(gen2) , ammeter (eng2, none) ) 
*********************************************** 

current  operator:  pos_landingl    depth  is:  6 
*********************************************** 

operator  preconditions  have  been  met 
items  being  deleted  are:  (altitude(1000)/airspeed(100) ) 
items  being  added  are:  (land(pos) , altitude(O) ,airspeed(0) ) 

operator  preconditions  have  been  met 
items  being  deleted  are:  M 
items  being  added  are:  ( land ( pr act )  1 
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operator  preconditions  have  been  met 


The  recommended  operators  are:  [conf irm_engl_f ailure, 
conf  irm_nf  2_failure,  engl_of£,  genl_pff,  pos_landingl, 
pract_landing_outrankedl J 


The  final  state  description  is:  [oil_press (engl,none ) 
oil_press (eng2,ok ) ,  revs ( rotor , low) ,  off ( rain_rmv) 
of f (master_arm) ,  landing_zone (clear ) ,  f ull ( throttlel ) 
f ull ( thrott le2 ) ,  of f (master_caut ion ) ,  automat ic ( govl ) 
automatic(gov2 ) ,  on(fuell),  on(fuel2)/  normal ( fuel_press ) 
torque (engl, none ) ,  torque(eng2, erratic ) ,  torque ( xmsn, low) 
torque(xmsn, erratic) ,  revs (ngl, none ) ,  revs (ng2, erratic ) 
revs (nf l,none ) ,  revs (nf 2,erratic) ,  oil_temp( engl, ok ) 
oil_temp(  eng2,ok),  failed  (genl ) ,  fulKfuel),  off(scas) 
on(ecu),  oil_temp( c_box, ok ) ,  oil_press ( c_box, ok ) 
oil_temp(xmsn,ok ) ,  oil_press (xmsn, ok ) ,  ammeter (genl, none ) 
ammeter (gen2 , ok ) ,  f uel_press ( ok ) ,  itt (engl , none ) 
itt(eng 2, erratic) ,  oil_press (hyd_sys_l, ok ) 

oil_press ( hyd_sys_2 , ok ) ,  airspeed ( 100 ) ,  alt itude ( 1000 ) 
left_yaw] 
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APPENDIX  D 
SOURCE  CODE  LISTING 


nowarnings 

code  =  3500 

trail  =  100 

/***********************  DOMAINS  *************************/ 

domains 


/*   The   domains   section  contains  the  declarations   of   the 

tyoes  and  symbols  used  in  this  program 

*/ 

/*   The  caution  panel  cluster  is  represented  by   ~erms 

corresoonding  to  a  single  liaht  in  zhe   aircraft 

*/ 


each 


segment  = 

engl_oil_oress ; 

engl_chip_detr : 

angi_£uei_f liter ; 

dc_gen_l; 

xmsn_chip_detr ; 

temp_press_90; 

chip_detr_90; 

xmsn_oil_hot; 

c_box_o  i l_pr ess ; 

hyd_jpress_l; 

hyd_temp_l; 

ac_main; 

engl_gov_man; 

f ire_l_pull; 

rpm_rotor_low; 

rpm_ngl; 


>na2    01 


i  i 


orass ; 


*ng2  _chip_detr ; 

:?ng2_fuel_f  liter ; 

dc_gen_2  ; 

c_box_chip_derr ; 

temp_press_42; 

chip_detr_42; 

xmsn_oil_press; 

c_box_oil_hot  ; 

hyd_press_2; 

hyd_temp_2; 

ac_stby  ; 

eng2_gov_man; 

f ire_2_pull; 

rpm_rotor_high; 

rpm_ng2 


xms  n_o  i 1 _byp ; 


segment_list  =  segment* 


/* 

Aircraf 
by  the  fol 
of  this  i 
and  the  zo 
different 
result  of 
as  pra 
autorotati 
sliding, 


t  weight  and  landing  zone  quality  are 
low-  ing  declarations,  with  respect 
mplementation  the  weight  can  be  one 
ne  quality  can  be  one  of  three  valu 
landing  profiles  and  ergencies.   A  la 

a  malfunction  could  be  described  as 
ctical,  soon  as  possible,  or  a 
on.  Profiles  can  can  be  normal, 
steep,  aircraft  at  max  weight,    or  a 


represented 

to  the  scope 

of  two  types 

es .   The  nine 

nding     as  a 

land  as   soon 

landing   via 

high   speed, 

landing  to  a 
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sloped  zone. 
*/ 

wt_class  = 

heavy  ;  moderate 

zone_quallty  = 

clear  ;  confined  ;  slope 

type_landing  = 

pract;  pos ;  auto; 

normal;  high_speed;  slope; 

sliding;  max_weight;  steep 

/* 

A  component   is  defined  as  being  any  of  the  below   listed 
names.   Some   of  these  components  were  noc  utilized   in   the 
knowledge  base. 
*/ 

component  = 

engl  ;  eng2  ;  xmsn  ;  cjbox  ; 

eng_oil_press : 

genl  ;  gen2  ;  govl  ;  gov2  ; 

naster _:aunion  ;  mascar_arm  ; 

ecu  ;  seas  ; 

fuel  ;  Euell  ;  fuel2  ;  fuel_prass  ; 

throttlel  :  throttled  ; 

oil_temp_90  ;  oil_press_90  ; 

oil_temp_42  ;  oil_press_42  ; 

gear_box_90  ;  gear_box_4  2  ; 

c_box_oil_press;  c_box_oil_temp; 

xmsn_oil_temp;  xmsn_oil_press  ; 

hyd_sys_l  ;  hyd_sys_2  ;  hyd__press; 

hyd_temp_l;  hyd_temp_2; 

rotor  ;  ngl  ;  ng2  ;  itt_l  ;  itt_2  ; 

nfl  ;  nf2  ;  rain_rmv  ;  power  ; 

main_inverter  ;  standby_inverter 

/*  The  aircraft's  guages  and  instruments  as  seen  by  the 
pilot  are  refered  to  as  components.  A  component  has  eight 
status  values  and  are  prioritized  by  a  fact  in  the 
knowledge  base.  A  given  component  may  have  more  than  one 
status  true  at  any  given  time.  For  instance  eng  torque  could 
be  both  'ok'  and  'decrease'  simultaniously . 
*/ 

component_status  = 

none  ;  high  ;  low  ; 

increase  ;  decrease  ; 

ok  ;  erratic  ;  respond 

/* 

A  status  list  is  a  list  of  component  status  values.   This 
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list    established  the  priority  of  the  status  values 
*/ 

status_list  =  component_status* 

/*   Some   components   are  described  as  being  in  one   of   the 

following  two   modes.  Each  is  mutually  exclusive 

*/ 

manual, 

automatic  =  mode 

/*   A  partial  state  description  of  the   aircraft   and   it's 
environment   at    any  given  time  is  defined  in  terms  of  the 
following  state  elements. 
*/ 

state_element  = 

prepare_f  or_failure (component ) ; power (component_status ) ; 

full (component ) ;  landing_zone ( zone_quality) ; 

me tal_par tides  (  component ) ;     f  uel_obst ruction  (  component ) ; 

f uel_press (component_status ) ;   automatic ( component ) ; 

manual (component ) ;  idle ( component ) ; 

normal ( component ) ;  decrease ( component ) ; 

failed (component ) ;  hot (component ) ; 

on (component ) ;  engaged (component ) ; 

of f (component ) ;  fire (component ) ; 

gross_weight ( wt_class ) ;         airspeed ( knots ) ; 

altitude ( f t ) ;  oat (component_status ) ; 

land ( type_landing ) ;  oil_bypassing_cooler ; 

itt ( component, component_status ) ;  lef t_yaw; 

ammeter (component, component _status ) ; 

revs(  component,  component_status ) ; 

oil_press(  component,  component_status ) ; 

oil_temp(  component,  component_status  ); 

torque (  component,  component_status  ) 

state_list  =  state_element* 

/*  Actions  to  be  taken  by  the  pilot  or  some  action  which 
must  be  taken  to  satisfy  an  immediate  goal.  The  objective 
of  this  planner  is  to  present  the  operators  to  the  pilot 
as  a  possible  diagnosis  of  the  present  state  of  affairs.  A 
list  of  these  operators  are  refered  to  as  an  op_list. 
*/ 

operator  = 

normal_approach  ;  slope_landing  ;  steep_approach  ; 

high_speed_approach  ;  max_weignt_landing  ;  sliding_landing; 

pract_landing;pract_landing_outrankedl; 

pract_landing_out ranked 2; pos_landingl; pos_landing2; 

autorotation;conf irm_engl_failure;  conf irm_eng2_failure; 

engage_scas  ;  ecu_off  ;  rain_rmv_off  ;  master_arm_of f ; 

govl_to_manual;govl_to_automatic;conf irm_nf l_failure; 

check_ngl_overspeed  ;  check_ngl_underspeed  ;gov2_to_manual ; 
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gov2_to_automatic  ;con£irm_n£2_£ai lure ;check_ng2_over speed; 
check_ng2_underspeed  ;  throttlel_idle  ;  throttle2_idle; 
conf irm_dual_eng_failure  ;  check_genl_£ailure  ; 
check_gen2_£ailure;genl_o£f ;  gen2_o££;   engl_o££;  eng2_o££; 
pos_landing_outranked 

op_list  =  operator* 

/***********************  DATABASE  ************************/ 
database 

/*  The  database  is  contains  only  one  fact  and  that  is  the 
list  of  goals  that  are  asserted  by  scanning  the  caution 
lights  and  the  instrument  panel.  The  database  is  only 
active  during  this  process  and  the  fact  temp_goals  is 
retracted  prior  to  calling  means_ends_analysis . 
*/ 

temp_goals  (state_list) 


nest_level, 

percent,  ft,  degrees,  amps, 

lbs,  knots,  oat,  value 

=  integer 


56 


/***********************  PREDICATES  ***********************/ 
predicates 

problem_solver       (  state_list,op_list,state_list  ) 

/*   predicates   used   directly  in  the   means   ends   analysis 
procedure 


* 


/ 


means_ends  (  state_list, state_list, op_list, 

state_list ,nest_level  ) 

recommended  (  state_list,  state_list,  operator  ) 

precondition  {  state_Iist,  operator,,  state_list  ) 

addpostcondition  (  operator,  stare_list  ) 
deietepostcondition  (  state_Iist,  operator,  state_list 

/*  predicates  used  to  scan  the  cockpit  for  goals 
*/ 

check_lights  (  state_iist,  state_iist  ) 

check_guages  (  sr.ate_iist  ) 

check_revs  (  state_list  } 

checx_?r3ssures  (  3tate_list  ) 

checx_csmps  (  state_Iist  ) 

check_iorque  (  stace_Iist  ) 

niastar_:aiit:on  (  state_Iisr,  3tata_list  ) 

cautionj.  ight  (  state_Iist,  segment  ) 

secondary  (  state_list,  segment) 

create_goals  (  state_list  ) 

ck_duplicate  (  state_element  ,  state_list  ) 

pickjpr ior ity_set  (  state_element,  state_list  ) 

priority_set  (  state_list  ) 

append_best_goal  (  state_list,  state_element  ) 

below_limit  (  status_list  ) 

changed  (  status_list  ) 

update  (  state_list  ) 

scan_panel  (  segment_list,  state_list  ) 

segment_panel  (  segment_list  ) 

/*  utilities 

*/ 

deleteitems  (  state_list,  state_list,  state_list  ) 

delete  (     state_element/      state_list, 
state_list  ) 

union  (  state_list,  state_list,  state_list  ) 

append  (  op_list,  op_list,  op_list  ) 

difference  (  state_list,  state_list,  state_list  ) 

subset  (  state_list,  state_list  ) 

member  (  statc_clement,  state_list  ) 

member2  (  state_element/  state_list  ) 
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statusjmember  (  component_status,    status_list    ) 

/*  test  cases 

*/ 

testl  (  op_list,state_list  ) 

test2  (  op_list,state_list  ) 

test3  (  op_list,state_list  ) 

test4  (  op_list,state_list  ) 
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/***********************  CLAUSES  ***********************/ 


/*  Problem_solver  is  the  top  level  predicate  from  which  all 
other  predicates  are  called.  The  goals  are  initialized  to 
empty.  The  guages  are  first  searched  for  components  in 
need  of  some  type  of  response.  Then  the  caution  lights  are 
searched.  Once  the  goals  have  been  asserted  means_ends  is 
called  to  present  the  operators  necessary  to  solve  the 
problem. 
*/ 

problem_solver (  State ,Oplist ,Goalstate  ):- 

asser ta ( temp_goals ( t 1 ) ) , 
check_guages ( State  ), 
check_lights( State,  Goal_list ) , ! , 
means_ends(   State,    Goal_list,    Oplist, 
Goalstate,  1  ) , ! . 

/*  This  recursive  procedure  has  two  rules.  The  first  is  a 
single  basis  step,  which  in  effect  says  stop  with  any 
state  that  includes  all  the  goal  facts.  The  second  rule 
is  the  induction  step  which  has  two  re-  cursive  calls:  the 
first  for  the  preconditions,  the  second  for  the 
postconditions.  A  list  of  facts  is  computed  that  are 
different  between  the  current  state  and  the  goal.  The 
recommended  facts  are  searched  in  order  to  find  one  whose 
goal  is  a  subset  of  the  goal  list.  If  so  then  retrieve  the 
preconditions  of  the  operator,  and  recursively  call  means 
ends  to  resolve  the  differences.  Once  the  preconditions 
have  been  satisfied  the  deletepostcondition  facts  are 
deleted  from  the  final  state  resulting  from  the  precondition 
recursion.  Then  the  addpostcondit ion  facts  are  retrieved  and 
added  to  the  state.  This  determines  the  state  after  the 
operator  application.  This  process  is  done  recursively 
until  all  preconditions  have  been  satisfied.  The  final 
operator  list  for  the  whole  problem  is  the  appending 
together  of  the  precondition-recursion  operator  list,  the 
recommended  operator,  and  the  postcondition  operator  list. 
*/ 

means_ends(  State,  Goal_list,  [],  State,  N  )  :- 
difference(  Goal_list,  State,  []  ), 
write ( "operator  preconditions  have  been  met"), 
nl,nl . 

means_ends(  State,  Goal_list,  Oplist,  Goalstate,  N  )  :- 
difference(  Goal_list,  State,  D  ), 
write("Goal  list  is:  ",Goal_list ) ,nl,nl, 
wr  ite( "difference :",D),nl,nl, 
recommended (  State,   Dsub,  Operator  ), 
subset(  Dsub,  D  ), 
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wr  i  te ( H  ************************************  M ) - 

nl,nl, 

write ( "current  operator:  ", Operator ) , 

write("    depth  is:  *,    N  ),nl,nl, 

write ( "************************************" ) 

precondition  State,  Operator,  Prelist  ), 

N2  =  N  +  1, 

means_ends(  State,  Prelist,  Preoplist, 

Prestate,  N2  ), 
deletepostcondition(  State,  Operator, 

Deletepostl ist  ), 
deleteitems(  Deletepostlist,  Prestate, 

Prestate2  ), 
write ( "items  being  deleted  are:  ", 

Deletepostlist ) ,nl, nl , 
addpostcondition(  Operator,  Addpostlist  ), 
write ("items  being  added  are:  ", 

Addpostlist ) , nl , nl, 
union(  Addpostlist,  Prestate2,  Postlist  ), 
means_ends (Postlist ,  Goal_list,  Postoplist, 

Goalstate,  N2  ) , 
append(  Preoplist,  t  Operator  I  Postoplist  1, 
Oplist  ),!. 

/*  'create  goals'  is  a  control  structure  that  provides  a 
way  to  generate  goals  from  within  the  program.  Before 
goals  are  appended  to  the  goal  list,  they  are  checked 
against  other  goals  in  the  same  class  to  eliminate  the 
appending  of  duplicates.  Each  class  is  a  list  of  prioritized 
state  elements.  If  a  goal  of  a  higher  priority  has  already 
been  appended  then  the  goal  under  con-  sideration  will  not 
be  appended.  create_goals  looks  at  the  first  of  the  goals 
to  be  considered.  If  a  duplicate  already  exists  in  the 
present  goal  list  the  ck_duplicate  fails  and  create_goals 
is  called  again  to  consider  the  next  goal.  If  there  are  no 
duplicates,  append_best_goal  checks  to  see  if  another 
goal  of  a  higher  priority  within  the  same  class  has 
already  been  asserted. If  no  higher  goal  has  been  asserted 
then  append_best_goal  adds  the  new  goal  to  the  new  goal 
list. 
*/ 

create_goals (   []):-!.    /*  succedes  when  no   goals   are 

specified.  */ 

create_goals(  (Gil  Rest]  )  :- 

temp_goals(Current_goals  ), 
ck_duplicate(  Gl,  Current_goals  ), 
pick_pr iority_set (Gl,  Set  ), 
append_best_goal (Set,Gl) , 
create_goals(  Rest  ),!. 
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create_goals(  I  Gil  Rest]  )  :-  !,  create_goals(  Rest  ). 

ck_duplicate(  X,  L  )  :-  not(  member  (  X,  L  )). 

/*  before  a  goal  is  asserted  into  the  goal  list  it  is 
checked  against  other  goals  in  its  priority  set  to  see  if 
a  goal  of  a  higher  priority  has  already  been  asserted.  Any 
goal  which  is  not  explicitly  listed  in  a  priority  set  fact 
is  assumed  to  be  the  only  member  in  it's  class. 
*/ 


pick_priority_set (  X, 
picjc_pr  iority_set  (  X, 


C  )   :-  priority_set (  C  ), 

member (  X,  C  ) - 
1X3  ).  /*  default  for  singleton  sets 
*/ 


/*   If   the  highest  priority  item  matches  the 
append   it.      check   to  see  if  a  higher  proirity 
been   asserted.   The  procedure  stops  at    the  higner 
goal  if  already  asserted 
*/ 
append_best_goai (  [ SingieGoal IRestSet ] , SingieGoal 

i:amp_goa i3( Current  _joa is  )  r 
jpdate* [ SingieGoal j Current_goais ] ) 
/*  assertion  */ 
append_besc_goai (  i SI JRestSet ] ,Single_goal 

/*  no  assertion  */ 

temp_goals(Current_goals) , 
ck_duplicate(  Sl,Current_goals 


goal    then 
goal   has 

trior i ty 


i 

r  * 


)     :- 


) 


append_best_goal(  RestSet,Single_goal  ) 


update (  New_goals  )  :- 

retract ( temp _goa Is (_) ), 

asserta( temp_goals(New_goals ) ) ,  I  . 

dif ference( t ) ,  S, [ ] ) . 


dif ference( 


dif f erence ( 


(  P  I  G  I,  S,  G2  )  :- 
member (  P,  S  ),  I, 
difference(  G,  S,  G2  ) 
[  P  I  G  ],  S,  [  P  |  G2 
difference(  G,  S,  G2  ) 


)  ) 


subset ( 
subset ( 


I  J,  L  ). 
C  X  I  L  }, 
member (  X, 
subset(  L, 


L2  )  :- 
L2  ), 
L2  ). 


member (  X,  [  X  I  L 
member (  X,  I  Y  I  L 


)  )  :-  !. 

1  )  :-  member (  X,  L 
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member2(    X,    I    X    I    L    1    ). 

member2(    X,    I    Y    I    L    )    )    :-      member2(    X,    L    ) . 

status_member (    X,    {    X    I    L    ]    )    :-    !. 

status_member (    X,    I    Y    j    L    1    )    :-      status_member (    X,    L    ) . 

append (  [  } ,  L,  L  ) . 

append (  [  X  I  L  ),  L2,  !  X  I  L3  1  )  :- 
append(  L,  L2,  L3  ) . 

union*  13,  L ,  L  )  . 

union <  [  X  I  LI  ] ,.  L2r  L3  )  :  -  member  (  X,  L2  ),  !, 

union(  1*1,  L2,  L3  ). 
union<  (  X  I  LI  ],  L2,  [  X  I  L3  1  )  :- 
union(  Li,  L2,  L3  )  . 

deleteitems <  ( I,  L,  L  ). 

deleteitems*  [  X  I  L  },  £.2,  L3  )  :- 

delete*  X,  L2 ,    LA 
delete items i    [»,  L4, 


t 


deletet  X,  {3,  [J  ). 
delete*  X,  {  X  i  L    i 


delete ( 


(  I 


'  t 


A    )    ':-    t4    delete  (  X,  [»,  A    ). 
Y  1  M  ]  )  :-  delete i    X,  L,  A    ) 


/*     The  performance  guages  are  the  primary  area  of   interest 
and  involve  the  temperatures,  pressures,  torque, and  RPM's  of 
various  components. 
*/ 

check_guages(  State  )  :- 

check_revs(  State  ), 

check_pressures(  State  ), 

check_teraps(  State  ), 

check_torque(  State  ). 

/*  The  rules  check_revs,check_pressures,check_temps,and 
check_torque  are  very  similar.  Bach  guage  is  checked  for  a 
change  in  value.  A  change  in  value  requires  a  response  of 
some  sort.  The  goal  is  to  respond  to  the  guage  or  light  in 
question . 
*/ 

check_revs(  State  )  :- 

member 2 (revs (Guage,  Value  ),  State  ), 
changed ( Up_or _Down ) , 
status_member( Value, Up_or_Down) , 
write( "revs( H, Guage, ",      M, Value," )H),nl,nl, 
create_goals ( ( revs ( Guage , respond ) ) ) , f a  i 1 . 
check_revs(  State  ). 
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check_pressures(  State  )  :- 

member  2  (oil__press  (Guage,  Value  ),  State  ), 

changed  ( Up_or _Down ) , 

status_member  ( Value, Up_or_Down) , 

write( "oil_press( ", Guage, ",  " , Value, " )"  ), 

nl,nl, 

create_goals( I oil_press (Guage, respond) 1 ) , fail 

check  jpressures(  State  ). 

check_temps(  State  )  :- 

member 2 (oil_temp( Guage,  Value  ),  State  ), 

changed ( Up_or _Down ) , 

status_member( Value, Up_or_Down) , 

wr ite<Hoil_temp(M, Guage, H,  M,Value,H)H  ), 

nl,nl, 

create_goals( [oil_temp( Guage, respond) ] ) , fail . 

check_temps(  State  ). 

check_torque(  State  )  :- 

member 2 (torque (Guage,  Value  ),  State  ), 
changed ( Up_or_Down ) , 
status  jmember ( Value, Up_or_Down) , 
vr ite( "tor que ( " , Guage, " ,  ", Value, H) H  ), 
nl,nl, 
create  _goa Is ( I torque (Guage , respond ) ] ) , fail . 

check_torque(  State  ). 


/*   check_lights   goes   through  all  the  caution   lights   and 
accumulates   all  the  goals  necessary  to  correct  the   present 
state  with  respect  to  the  caution  panel. 
*/ 

check_lights(  State, Goal_list  )  :- 

segment_panel (Cluster ) , 

scan_panel ( Cluster , State ) . 
check_lights(  State,  Goal_list  )  :- 

temp_goals (Goal_list ) , 

retract (temp_goals(_) ) . 

/*  scan_panel  calls  each  caution  light  in  the  panel 
V 

scan_panel( { ) , State) :-! , fail. 
scan_pane 1 ( ( Seg I Ta  i 1 ) , State ) : - 

caution_lignt (State, Seg) , 1 , 
scan_pane 1 ( Ta  i 1 , State ) . 
scanjpaneK I Seg I  Tail ), State) :-scan_panel (Tail, State ) . 
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/*************CAUTION  AND  WARNING  LIGHTS  *************/ 

segment_panel( {  engl_pil_press,  eng2_oil_press, 

engl_chip_detr/  eng2_chip_detr, 

engl_fuel_£  liter,  eng2_fuel_f liter , 

dc_gen_l,  dc_gen_2, 

xmsn_chip_detr ,  c_box_chlp_detr , 

temp_press_90,  temp_press_42, 

chlp_detr_90/  chip_detr_42, 

xmsn_oil_hot,  xmsn_oil_press, 

c_box_oil_press,  c_box_oll_hot  , 

hyd_press_l,  hyd_press_2, 

hyd_temp_l,  hyd_temp_2, 

ac_main,  ac_stby  , 

engl_gov_man,  eng2_gov_man, 

fire_l_pullf  fire_2_pull, 

rpm^otor^ow,  rpm_rotor_hlgh, 

rpm_ngl,  rpm_ng2f 
xmsn_oil_byp  J). 

/*   The  master_caution  light  is  illuminated  if  there   exists 

any  caution  light  that  is  on 

*/ 

master _cauti on (  State,  Goal_list  )  :- 

caution_light (  State,  _  ). 

/*  Listed  below  are  the  rules  for  each  caution  light.  Each 
caution  light  has  its  own  goals  to  assert  and  in  some  cases 
secondary  indications  are  necessary  to  choose  the 
appropriate  goals.  All  sensor  information  is  assumed  true 
and  is  not  questioned.  This  assumption  eliminates  cross- 
checking requirements. 
*/ 

caution_light(  State,   engl_oil_press ) :- 

member (oll_pr ess (  engl,  X  ),  State  ), 
below_limit(L) ,  status_member (X,L) , 
write(  M  Caution  light:  engl_oil_pressM  ),nl, 
create_goals( I  off (engl),  land(pract)  1  ). 

caution_llght (  State,   engl_chip_detr  ):- 

member (metal_part icles( engl) ,  State  ), 

write(  H  Caution  light:  engl_chlp_detr  M  ),nl, 

secondary (State,  engl_chip_detr ) . 

caution_light (  State,   eng2_oll_press  ):- 

member (oil_press(  eng2,  X  ),  State  ), 
below_limit(L) ,  status_member (X,L) , 
write(  "  Caution  light:  eng2_oil_pressM  ),nl, 
create_goals( (  off(eng2),  land(pract)  1  ). 

caution_light(  State,   eng2_chip_detr  ):- 
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member (metal_particles(eng2 ) ,  State  ), 

write(  H  Caution  light:  eng2_chip_detr  "  ),nl, 

secondary (State,  eng2_chip_detr ) . 

caution_light(  State,   engl_£uel_f ilter  ):- 

member ( £uel_obstruction(engl ) ,  State ) , 
write(  "  Caution  light:  engl_fuel_£ilter  "),nl, 
create_goals( lprepare_£or_failure(engl) , 
land(pract )  1  ) . 

caution_light (  State,   eng2_£uel_£ilter  ):- 

memoer  (  £uel_obstrvscr  ion(eng2  ) ,  State  ) , 
write<  ■  Caution  iignt:  eng2_r uel_f ilter  ;t),nl, 
create_goals< [prepare_tor_£ailure(eng2 ) , 
land(pract )  ]  ) . 

caut ion_l ight (  State,   dc_gen_l  ):- 

memoer ( off tgeni ) ,  State  ), 

write<  "  Caution  iight:  dc_gen_l  "  ),ni, 

create_goais ( { 3  ). 

caution_light {    State,   dc_gen_l  >:- 

memoer ( failed (geni) ,  State), 

write <  *  Caution  light:  dc_gen_l  "  ),nl, 

create _goa Is ([  ofiiqenl)    ]  ). 

caution_l ight  (  State,   dc_gen_2  ):- 

member (off(gen2) ,  State  ), 

write(  M  Caution  light:  dc_gen_2  ••  ),nl, 

create_goals (II  ) . 

caut ion_l ight (  State,   dc_gen_2  ):- 

member (failed (gen2) ,  State), 

write(  H  Caution  light:  dc_gen_2  "  ),nl, 

create_goals( I  o££(gen2)  1  ). 

caut ion_l ight (  State,   xmsn_chip_detr  ):- 

member (metal_particles(  xmsn  ),  State  ), 
write (  M  Caution  light:  xmsn_chip_detr  "  ),nl, 
secondary (State,  xmsn_chip_detr ) . 

caution_light(  State,   c_box_chip_detr  ):- 

member (metal_part iciest  c_box  ),  State  ), 
write(  ■  Caution  light:  c_box_chip_detr  M  ),nl, 
create_goals( [power (decrease ), land (pos )  )  ). 

caution_light(  State,   temp_press_90  ):- 

member (oil_temp(  gear_box_90,  high  ),  State  ), 
write(  ■  Caution  light:  tempjpress_90  M  ),nl, 
create_goals( I  land (pos)  )  ). 
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caution_llght(  State ,   tempjpress_90  ):- 

member (oil_press(  gear_box_90,  X  ),  State  ), 
below_limlt(L) ,  status_merober ( X,L) , 
write(  "  Caution  light:  temp_press_90  "  ),nl, 
create_goals( {  land(pos)  1  ). 

caution_light (  State,   temp_press_42  ):- 

member (oil_temp(  gear_box_42,  high  ),  State  ), 
write(  "  Caution  light:  temp_press_42  M  ),nl, 
create_goals( (  land(pos)  ]  ). 

caution_light  (  State,   tamp_t>ress_4  2  ):- 

member ( oi impress (  gear_box_42,  X  ),  State  ), 
below_limit (L) r  status _member ( X,L ) , 
write<  ■  Caution  light:  terap_press_42  ■  ),nl, 
create_goals ( I    land(pos)  ]  ). 

caution_light <  State,   chip_detr_90  ):- 

member (metal_particles  <qear_box_90 ) , State  ) , 
write(  "  Caution  light:  cnip_cietr_90  ''  ),nl, 
craate_'3oais(  [power  (decrease  )  ,  land(pract )  ]  )  . 

caution_liqht{  State,   chip_detr_42  ):- 

memDer (metai_particies (gear_box_42  ), State 
writa<  "  Caution  light:  cftip_detr_42  "  ),nl, 
3reata_goais( I  power ( decrease ) , land( pract ) ]  )  . 

caution_light (  State,   xmsn_oil_hot  ):- 

member (oil_temp(  xmsn,  high  ),  State  ), 
write (  "  Caution  light:  xmsn_oil_hot  "  ),nl, 
create_goals( [  power (decrease) , 

prepare_f  or_fai lure ( xmsn) , 
land ( pos )  ]  ) . 

caution_light (  State,   xmsn__oil_press  ):- 

member (oil_press (  xmsn,  X  ),  State  ), 
below_limit(L) ,  status_member (X,L) , 
write(  M  Caution  light:  xmsn_oil_press  "  )#nl, 
create_goals( (  power (decrease), 

prepare_f  or_failure (xmsn) , 

land (pos )  1  ) . 

caution_light(  State,   c_box_oil_press  ):- 

member (oil_press(  c_box,  high  ),  State  ), 
write(  "  Caution  light:  c_box_oil_press  M  ),nl, 
create_goals( (  power (decrease) ,  land (pos)   1  ). 

caution_light(  State,   c_box_oil_hot  ):- 

member (oil_temp(  c_box,  high  ),  State  ), 
write (  "  Caution  light:  c_box_oil_hot  "  ),nl, 
create_goals( [  power (decrease ) ,  land (pos)  1  ). 


66 


caution_light (  State,   hyd_press_l  ):- 

member (oil_pr ess (  hyd_sys_lf  X  ),  State  ), 
below_limit(L) ,  statusjmember (X,L) , 
write (  M  Caution  light:  hyd_press_l  "  ),nl, 
create_goals( (  of f (hyd_sys_l) , land(pos )  1  ). 

caution_light(  State,   hyd_press_2  ):- 

member (oil_press(  hyd_sys_2,  X  ),  State  ), 
below_limit (L) ,  status_member (X,L) , 
write(  "  Caution  light:  hyd_press_2  M  ),nl, 
create_goals( I   off (hyd_sys_2 ), land (pos )  3  ) 

caution_light(  State,   hyd_temp_l  ):- 

member (oil_temp(  hyd_sys_l,  high  ),  State  ), 
write (  "  Caution  light:  hyd_terap_l  "  ),nl, 
create_goals( [  of f (hyd_sys_l ) , land (pos )  J  ). 

caution_light (  State,   hyd_temp_2  ):- 

member (oil_temp(  hyd_sys_2,  high  ),  State  ), 
write(  "  Caution  light:  hyd_temp_2  "  ),nl, 
create_goals( I  of f (hyd_sys_2 ) , land (pos )  1  ). 

caution_light (  State,   xmsn_oil_byp  ):- 

member ( oil_bypassing_cooler ,  State  ), 
write(  N  Caution  light:  xmsn_oil_byp  ■  ),nl, 
create_goals( 1  power (decrease ) , 

prepare_f  or_£a  i lure ( xmsn ) , 

land (pos)  )  ) . 

caution_light(  State,   ac_main  ):- 

member ( failed (  main_inverter  ),  State  ), 
write(  "  Caution  light:  ac_main  "  ),nl, 
create_goals( [ 1  ).  /*  not  implemented  */ 

caution_light(  State,   ac_stby  ):- 

member ( failed (  standby_inverter  ),  State  ), 
write (  H  Caution  light:  ac_stby  n    ),nl, 
create_goals( I  1  ).  /*  not  implemented  */ 

caution_llght(  State,   engl_gov_man  ):- 

member ( manual (  govl),  State  ), 

write (  H  Caution  light:  engl_gov_man  "  ),nl, 

create_goals( I  1  )./*  no  goal  required  */ 

caution_light(  State,   eng2_gov_man  ):- 

member (manual (  gov2),  State  ), 

write(  "  Caution  light:  eng2_gov_man  M  ),nl, 

create_goals( I  J  )./*  no  goal  required  */ 

caution_light(  State,   fire_l_pull  ):- 
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member (f ire (  engl  ),  State  ), 

write(  "  Caution  light:  fire_l_pull  ■  ),nl, 

create_goals( t 1  ). 

caution_light(  State,    fire_2_pull  ):- 
member (£ ire (  eng2  ),  State  ), 
write(  M  Caution  light:  fire_2_pull  M  ),nl, 
create_goals( ( )  ). 

caution_light(  State,   rpm_ngl  ):- 

member ( revs (  ngl,  X  ),  State  ), 
below_limit(L) ,  statusjmember (X,L) , 
write(  "  Caution  light:  rpm_ngl  "  ),nl, 
create_goals( (  revs (ngl, respond )  1  ). 

caution_light (  State,   rpm_ng2  ):- 

member ( revs (  ng2,  X  ),  State  ), 
below_l imlt ( L) ,  status_member ( X, L) , 
write (  H  Caution  light:  rpm_ng2  "  ),nl, 
create_goals( I  revs ( ng2, respond)  1  ). 

caution_light (  State ,   rpra_rotor_low  ):- 

member ( revs (  rotor,  low  ),  State  ), 

write (  n   Caution  light:  rpm_rotor_low  "  ),nl, 

create_goals ( (  revs ( rotor , respond )  J  ). 

caution_light(  State,   rpm_rotor_high  ):- 

member ( revs (  rotor,  high  ),  State  ), 

write(  "  Caution  light:  rpm__rotor_high  "  ),nl, 

create_goals( (  revs (rotor, respond)  1  ). 


/*   secondary  state-requirements  for  certain  caution   lights 

are  expressed  below. 

*/ 

secondary ( State,  engl_chip_detr )  :- 

member (oil_press( engl,  X  ),  State  ), 
below_limit (L) ,  status_member (X,L) , 
create_goals( (  of  £ (engl ), land ( pract ) 1  ). 
secondary (State,  engl_chip_detr )  :- 

member (oil_temp( engl,  high),  State  ), 
create_goals( (  off ( engl ), land (pract ) )  ). 
secondary ( State,  engl_chip_detr )  :- 

create_goals( I  idle (throttlel ), land (pract ) 1  ). 

secondary (State,  eng2_chip_detr )  :- 

member (oi l_pr ess (eng2,  X  ),  State  ), 
below_limit(L),  status_member (X,L) , 
create_goals( I  of f(eng2 ), land (pract ) ]  ). 

secondary(State,  eng2_chip_detr )  :- 

member (oil_temp( eng 2,  high),  State  ), 
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create_goals( t  of f (eng2) , land(pract ) ]  ). 
secondary (State,  eng2_chip_detr )  :- 

create_goals( I  idle <throttle2 ), land (pract) 1  ) 

secondary( State,  xrosn_chip_detr )  :- 

member (oil_temp(xmsn, high),  State  ) , 
create_goals( { prepare_£or_f allure (xmsn) , 
land(pos) 1  ) . 

secondary ( State,  xmsn_chip_detr )  :- 

member (oil_press (xmsn ,X  ),  State), 
below_limit (L) ,  status_member ( X, L) , 
create_goals ( i prepare_£ or _fai lure (xmsn } , 
land( pos ) \     ) . 

secondary( State ,  xmsn_chip_detr )  :- 

create_goals H  land (pos) 3  ). 

changed ( [erratic, increase , decrease  } )  . 

be!ow_limit ( {none , low] ) . 
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/*<<<<<<<<<<<«<<<  recommended  operators  >>>>>>>>>>>>>>>>*/ 


recommended   facts  gives  the  operator  to  apply 
the  goals  listed.  The  order  in  which  these  facts 
is   crutial   to   the  over   all   performance   of 
Those   opeators   that  are  the   most   difficult 

come   before  those  that  are  eaiser.   Operators 


to 
are 
the 

to 
are 


/*   The 

achieve 

listed 

planner 

satisty 

also  listed  in  order  of  urgency.   A  given  goal  may  have  more 

than   one   operator  that  is  suitable.   These   operators   are 

ordered  in  the  same  manner  as  above. 

*/ 

recommended (  State,  [ revs (  ng2, respond) , revs  (  ngl, respond  ) , 

or£{qcnl),ot'£(gen2), 
off i engl) , o££(eng2) , land(pract )  ] , 
conf irm_dual_eng_£ailure  ) . 


recommended <  State,  t revs (rotor , respond ) 

contirm_eng2_cailure ) . 
recommended (  State,  {revs ( rotor , respond ) 

cont irm_engi_iaiiure ) . 
recommended (  State,  [ revs ( rotor , respond ) 

govl_to_jnanuai )  . 
recommended (  State,  i revs ( rotor , respond ) 

gov2_~o_manuai ) . 

recommended (  State,  ( torque ixmsn, respond 
check_ngi_underspeed) . 

recommended (  State,  t torque (xmsn, respond 
check_ng2_underspeed) . 

recommended (  State,  [torque (engl, respond 

conf irra_nfl_fai lure) . 
recommended (  State,  { torque (engl, respond 

check_ngl_overspeed) . 
recommended (  State,  [torque (engl, respond 

check_ngl_underspeed) . 

recommended (  State,  [ torque (eng2, respond 

conf irm_nf 2_failure) . 
recommended (  State,  I  torque (eng2, respond 

check_ng2_overspeed) . 
recommended (  State,  t torque (eng 2, respond 

check_ng2_underspeed) . 

recommended (  State,  I  revs (ngl, respond) ] , 
govl_to_manual ) . 

recommended(  State,  (revs(nf 1, respond) ] , 
govl_to_manual ) . 

recommended (  State,  I  revs (ng2, respond) } , 
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gov2_to_raanual ) . 


recommended (  State,  lrevs(nf2, respond) J , 
gov2_to_manual ) . 

recommended (  State,  { land ( auto ) 1 ,  autorotation) . 

recommended (  State,  ( £ailed(eng2 ) 1 , 

con£irm_eng2_failure) . 
recommended (  State,  ( fai led (engl ) J , 

conf irm_engl_£ailure ) . 


recommended ( 
recommended ( 
recommended ( 
recommended ( 
recommended ( 
recommended ( 


State,  ( failed(govl) J ,conf irm_nf l_failure ) . 

State,  t  £ailed(govl ) 1 , check_ngl_overspeed ) . 

State,  ( failed(govl ) } ,check_ngl_underspeed) . 

State,  [ f ai led (gov2 ) ) ,con£irm_nf 2_failure ) . 

State,  t  £ailed(gov2 ) J ,check_ng2_overspeed) . 

State,  ( £ailed(gov2 ) ] ,check_ng2_under speed ) 


recommended (  State,  { itt (engl, respond ) 1 ,govl_to_manual ) . 

recommended (  State,  I itt (eng2, respond )] ,   gov2_to_manual ) 

recommended (  State,  t fai led(genl ) J ,check_genl_£ai lure ) . 

recommended <  State,  I £ailed(gen2 ) 1 ,  check_gen2_failure ) . 


recommended(  State,  { engaged ( seas ) J , 


engage _scas  ) 


recommended ( 
recommended ( 


State,  [automatic(gov2 ) I ,gov2_to_automatic) . 
State,  (automatic(govl) J ,govl_to_automatic) . 


recommended (  State,  ( idle( throttlel ) ] ,throttlel_idle  ). 

recommended!  State,  ( idle ( throttle2 ) ] , thrott le2_idle  ). 


recommended ( 
recommended ( 
recommended ( 
recommended ( 
recommended ( 
recommended ( 


State,  lo££(engl)l, 

State,  to££(eng2)J, 

State,  (off(ecu)), 

State,  (off(genl)), 
State,   loff(gen2)], 

State,  [of f (rain_rmv) 1 , 


engl_off  ) 
eng2_o£f  ) 
ecu_of £  ) . 
genl_off  ) 
gen2_o£f 
rain  rmv  off  ) 


recommended!  State,  [of f (master_arm) )  ,   master _arm_off  ). 


recommended ( 
recommended ( 
recommended ( 

recommended ( 

recommended ( 


State,  ( land(pos) 1 ,pos_landing_outranked  ) 
State,  (land(pos)],        pos_landingl  ). 
State,  (land(pos)],        pos_landing2  ). 


State,  [ land ( pract ) J , 
pract_landing_outrankedl 
State,  [land ( pract) ), 


recommended!  State, 
recommended (  State, 


( land(normal) ), 
[ land(slope) ) , 


) 


pract_landing  ) . 

normal_approach  ) 
slope_landing  ) . 
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recommended (  State,  I  land (steep) ) ,      steep_approach  ). 
recommended (  State,  ( land(high_speed) 1 , 

high_speed_approach  ) . 
recommended (  State,   I  land (max_weight ) J , 

max_weight_landing  ) . 
recommended (  State,   I  land (sliding) ] ,    sliding_landing  ) 
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/*<<<<<<<<<<<<<<<<<<<  preconditions  >>>>>>>>>>>>>>>>>>>*/ 

/*   The   preconditions  for  the  application  of  operators   are 

defined  in  these  facts 

*/ 

precondition  State,  genl_off  ,11). 

precondition*  State,  gen2_off  ,()). 

precondition*  State,  engl_off  ,13). 

precondition*  State,  eng2_off  ,13). 

precondition*  State,,  check_genl_failure  7[on*genI), 
ammeter  *  engl, none ) 3 ) . 

precondition*  State,  check_gen2_failure  ,[on(gen2), 
ammeter ( eng2 , none ) } ) . 

precondition*  State ,  govl_to_nanual„ 

(automatic (govl ) ,  automatic ( gov2 ) , 
£ailed*govi) ,  idle* throttle! ) 3 ) . 

i 

precondition*  State,  govl_to_automatic, 

[  idle  (  throictlel )  ,  manual  ( govl )  ]  )  . 

precondition*  State,  conf irm_nf l_failure, 

I  revs (ngl, erratic) , itt( engl, erratic) , 

revs(nf 1, erratic) , 

torque (engl, erratic) ,  automatic (govl) 1 ) . 

precondition*  State,  check_ngl_underspeed, 

trevs (ngl, decrease ) , revs (nf 1, deer ease ) , 
torque (engl, deer ease ) , automatic (govl) 1 ) . 

precondition (  State,  check_ngl_over speed, 

(revs (ngl, increase ) ,revs(nf 1, increase) , 
torque (engl, increase) ,automatic(govl) ] ) . 


precondition  State,  gov2_to_manual, 

Cautomatic(gov2) ,  automat ic( govl ) , 
failed(gov2),  idle ( throttle2 ) 1 ) . 

precondition*  State,  gov2_to_automatic, 

( idle (throttle 2) , manual *gov2 ) ] ) . 

precondition(  State,  conf irm_nf 2_failure, 

I  revs (ng2, erratic) ,itt(eng2, erratic), 
revs(nf 2, erratic) , tor que (eng2, erratic) , 
automat ic(gov2) ) ) . 
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precondition    State,    check_ng2_underspeed, 

t revs (ng2, decrease ) , revs(n£ 2, deer ease) , 
torque *eng 2, deer ease ) , automat ic(gov2 ) 1 ) . 

precondition  State,  check_ng2_overspeed, 

[ revs ( ng2, increase ) , revs ( nf 2,  increase ) , 
torque (eng2, increase ) , automat ic(gov2 ) ] ) . 

precondition-:  State,  autorotation,  [  failed  (engl)  , 
failed(eng2) 1 ) . 

precondition!  3tace,  high_speed_approachr {  £ire(_)j). 

precondition(  State,  max_weight_landing, 
{  gross_weight( heavy) , 
landing_zone ( clear ) ] ) . 

precondition  3tacar  3liding_landing/  (power (low), 
landing_zone< clear ) 1 ) . 

precondition*  State,  pos_Ianding_outranked , 

[ land(auto ) 3 ) - 

pracondit ion(  Stata,  pos_landingl , 

[ failed (engl) 3 ) . 

precondition    State,    pos_landing2, 
[£ailed*eng2)]) . 

precondit ion(    State,    pract_landing, 

I  land ing_zone( clear ) 1 ) . 

precondition  State,  pract_landing_outrankedl, 
( land(pos ) 1 ) . 

precondition  State,  normal_approach, 

(  revs(  rotor,  ok  ),  off(  master_caution  ), 
engaged*  seas  ) ,of f (ecu) ,o£f (rain_rmv) , 
o£f(  roaster_arm  ),  landing_zone (clear ) 1 ) . 

precondition*  State,  slope_landing, 

(  revs(  rotor,   ok  ),  off(  roaster_caution  ), 
engaged*  seas  ),o££(  ecu  ),of£(  rain_rmv   ), 
o££(master_arm  ), 
landing_zone (slope ) ,gross_weight (moderate ) ] ) . 

precondition*  State,  conf irm_engl_failure, 

( torque  * engl, none ) ,  torque (xmsn, low) ,  revs (ngl, none ) , 
revs*nf l,none ) ,  oil jpress*engl, none ) ,  £ailed(genl ) , 
itt*engl,none ) ,  le£t_yaw,  on* fuell ) , full  * throttlel ) , 
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revs (rotor, low) 1 ) . 

precondition  State,  conf irm_eng2_failure, 

{ torque (ehg2, none) ,  torque (xrosn, low) , revs (ng2, none ) , 
revs(nf 2, none),  oil_press(eng2,none) ,  failed(gen2 ) , 
ltt(eng2,none),  left_yaw,  on(fuel2),  £ull( throttle2) , 
revs (rotor, low) ) ) . 

precondition*  State,  con£irm_dual_eng_failure, 

[  o i l_pr ess (engl, none) ,  oil_press(eng2,none) , 
revs(rotor,low),  f ull( throttlel) ,  f ull( throttle2) , 
on(fuell),  on(fuel2),  torque (engl, none ) , 
torque(eng2,none ) ,  torque ( xrosn, low) ,  revs ( ngl, none ) , 
revs (ng2, none ) ,  revs(nf l,none ) ,  revs(nf 2, none ) , 
failed(genl) ,  £ailed(gen2) , off (seas) , itt (engl, none ) , 
itt(eng2,none ) ,  left_yaw  ]). 

precondition  State,  engage_scas, { ]  ). 

precondition*  State,  ecu_o£f,M  ). 

precondition*  State,  rain_rrav_of f , t J ) . 

precondition*  State,  master_arro_o££,  M )  . 

precondition*  State,  throttlel_idle, { J ) . 

precondition*  State,  throttle2_idle, [ ] ) . 
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/*<<<<<<<<<<<<<<<<  deletepostconditions  >>>>>>>>>>>>>>>>*/ 

/*   The   respective   state  elements  to  be  deleted   from   the 
state   description,   for  each  operator  are  defined  in   these 
facts . 
*/ 

deletepostcondition(  State,  genl_off,  (on(genl) ]  ). 

deletepostcondi t ion{  State,  gen2_off,  (on(gen2)l  ). 

deletepostcondition(  State,  engl_off,  (on(engl)]  ). 

deletepostcond i t ioni  State,  eng2_off,  (on(eng2)]  ). 

deletepostcondition(  State, check_genl_failure, ton(genl) ] ) . 

deletepostcondition(  State, check_gen2_failure, ton(gen2) 1 ) , 

deletepostcondition(  State,  conf irm_engl_failure , 

(on(ecu) J  ) . 

deletepostcondition(  State,  conf irm_eng2_failure, 

( on( ecu) )  ) . 

deletepostcondition(  State,  conf irm_dual_eng_failure, 

( on { ecu ) J  ) . 

deletepostcond it ion (  State,govl_to_manual, 

{ automat ic(govl) ,  ldle( throttle 1) , 
revs(ngl,_),  itt(engl,_), 
revs(nf 1,_) ,revs(rotor,_) , 
torque(engl,_) 1 ) . 

deletepostcond it  ion(  State,govl_to_automat ic, 

(manual (govl) , manual ( throttle 1 ) ] ) . 

deletepostcond it ion(  State, conf irm_nfl_failure,  [ ] ) . 

deletepostcondition(  State, check_ngl_underspeed, [ ] ) . 

deletepostcondition(  State, check_ngl_overspeed, { 1 ) . 

deletepostcond it ion (  State,gov2_to_manual, 

(automatic (gov 2 ) , idle ( throttle 2 ) ,revs(ng2,_) , 
itt(eng2,_)  ,revs (nf 2,_) , revs ( rotor, _) , 
torque(eng2,_) J ) . 

deletepostcond it ion(  State, gov2_to_automa tic, 

[manual (go v2 ) , manual ( throttle 2 ) 1 ) . 
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deletepostcondltion 
deletepostcondition 
deletepostcondltion 
deletepostcondition 

deletepostcondition 

deletepostcondition 
deletepostcondition 
deletepostcondition 
deletepostcondition 

deletepostcondition 

deletepostcondition 

deletepostcondition 

deletepostcondltion 

deletepostcondition 

deletepostcondition 

deletepostcondition 

deletepostcondition 

deletepostcondition 

deletepostcondition 


State /con£irm_nf 2_fai lure, [ J ) . 

State, check_ng2_underspeed, M  )  . 

State, check_ng2_overspeed, t 1 ) . 

State,  throttlel_idle, 
(fulKthrottlel)  J)  . 

State,  throttle2_idle, 
(£ull(throttle2) 1) . 

State,  acu_off,  ion(ecu)]). 

State,  engage_scas,  [of ft  seas) ] ) . 

State,  rain_rmv_of f ,  { on<rain_rmv) ] ) . 

State,  master _arm_p£  £ , 
i on (master _arm) j ) . 

State,  norma i_approachr  [altitude*  _)  , 
airspeed(  _)■]"). 

State,  slope _landinq,    (altitude*  _;  , 
air speed ( _) ] ) * 

State,  steep_approach,   (alt itude(  _) , 
airspeed(_) 1 ) . 

State,  high_speed_approach, 
altitude(_),  airspeed(_)  ] ) . 

State,  max_weight_landing, 
altitude(_),  airspeed(_)  ] ) . 

State,  sliding_landing, 
altitude(_),  airspeed(_)  ] ) . 

State,  pract_landing_outrankedl, 
1). 

State,  pract_landing, 
altitude(_),  airspeed(_)  1 ) . 

State,  pos_landing_outranked, 
1). 

State,  pos_landingl, 
altitude(_),  airspeed(_)  ] ) . 
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deletepostcondltton(  State,  pos_landing2, 

(altitude(_) ,  airspeed(_) 1 ) . 

deletepostcondition(  State,  autorotation, 

(full(throttlel),  f ull (throttle2 ), airspeed (_) , 
altitude(_),  revs (rotor ,_) 1 ) . 
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/*<<<<<<<<<<<<<<<<<  addpostconditions  >>>>>>>>>>>>>>>>>>*/ 

/*   The  respective  state  elements  to  be  added  to   the   state 
description,  for  each  operator  are  defined  in  these  facts. 
*/ 

addpostcondi t ion (  check_genl_f a i lure, 

(  off (genl),failed(genl) J) . 

addpostcondit ion (  check_gen2_failure, 

(  off (gen2),failed(gen2) 1) . 

addpostcondition(  genl_off, 

(  off (genl)  }) . 

addpostcondition(  gen2_off, 

(  off (gen2)  ]) . 

addpostcondit ion (  engl_off, 

(  off(engl)  ]). 

addpostcondi tion(  eng2_off, 

{  off (eng2)  ]) . 


addpostcondi tion(  autorotation, 

( idle (thrott lei),  idle( throttle  2) , 
airspeed(O),  altitude(O) , revs (rot or, respond ) , 
land(auto) ) ) . 

addpostcondition(  conf irm_engl_failure, 

(  of f (ecu) , failed(engl) , revs (ngl, respond) , 
revs (nf 1, respond) ,     revs (rotor , respond ) , 
itt(engl, respond) ,  torque (engl, respond) , 
torque (xmsn, respond) ] ) . 

addpostcondit ion (  conf irm_eng2_failure, 

I    of f (ecu) ,failed(eng2) , revs (ng2, respond) , 
revs (nf 2, respond) ,  revs (rotor, respond) , 
itt(eng2,respond),  torque (eng2, respond ) , 
torque ( xmsn, respond ) 1 ) . 

addpostcondit ion (  conf irm_dual_eng_failure, 

(  off (ecu), failed (engl), failed (eng2), of f (genl), 
off(gen2),  off(engl),  off(eng2),  revs (ngl, respond ) , 
revs (nf 1, respond) ,  revs (rotor, respond) , 
itt (engl, respond) ,  itt(eng2, respond) , 
revs (ng2, respond) ,  revs (nf 2, respond) ] ) . 

addpostcond  i t  i  on ( govl_to_manual , 
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(manual (govl ) ,  manual ( thrott lei ) , 
revs(ngl,ok) ,  itt(engl,ok ) ,  revs(n£l,ok) , 
revs(rotor ,ok ) ,  torque(engl,ok ) , 
torque (engl, respond) ,    revs (ngl, respond) , 
revs(n£l, respond) , revs (rotor , respond ) , 
itt (engl, respond) J ) . 

addpostcondition(govl_to_automatic,  (automat ic ( govl ) 1 ) . 

addpostcondit ion(conf irm_nf l_failure, ( revs ( ngl, respond) , 

revs(nf 1, respond) ,  failed(govl) , 
torque (engl, respond ) 1 ) . 

addpostcond it ion ( check  _ngl_under speed, I  revs (ngl, respond) , 

revs(nfl, respond) ,  failed(govl) , 
torque (engl, respond ) 1 ) . 

addpostcondition(check_ngl_overspeed, (revs(ngl, respond) , 

revs (nfl, respond ) ,  £ailed(govl ) , 
torque (engl, respond ) J ) . 

addpostcondit ion (gov 2_to_manual, 

(manual ( gov2 ) ,  manual ( throttle2 ) ,  revs ( ng2,ok ) , 
itt (eng2,ok ) ,revs(n£2,ok ) , revs (rotor , ok ) , 
torque (eng2, ok ) , torque (eng2, respond ) , 
revs (ng 2, respond ) ,  revs( nf 2, respond ) , 
revs ( rotor , respond ), itt (eng 2, respond ) J ) . 

addpostcondition(gov2_to_automatic,  I automatic (gov2) ] ) . 

addpostcond it ion (conf irm_nf 2_failure, ( revs ( ng 2,  respond)  , 
revs(nf 2,respond),  failed(gov2) , 
torque (eng2, respond) ] ) . 

addpostcond it ion (check_ng2_under speed, (revs (ng2, respond ) , 

revs ( nf 2, respond ) ,  fa i led ( gov2 ) , 
torque (eng2, respond ) ] ) . 

addpos tcond i t ion ( check  _ng2_o  vers peed, ( revs (ng 2, respond) , 

revs(nf 2, respond) ,  failed ( gov2 ) , 
torque(eng2, respond) 1 ) . 

addpostcondition(  throttlel„idle,  [  idle(  throttlel) ] ) . 

addpostcondition(  throttle2_idle,  I  idle(  throttle2) ) ) . 

addpostcondition(  ecu_pf£,  loff(ecu)l). 

addpostcond it  ion (  engage_scas,  ( engaged ( seas )]) . 

addpostcondit ion (  rain_rmv_of f ,  [of f (rain_rmv) 1 ) . 
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addpostcondition(  master_arm_of £ ,  (of f <master_arm) ] ) 


addpostcondition 
addpostcondition 
addpos tcond i  t  ion 


addpostcondition 
[land 

addpostcondition 
(land 

addoostcondition 
[  land 

addpostcondition 


addpostcondi  sion 
addpostcondition 
addpos tcond  i  t  ion 


norma l_approach, 
land (normal),  altitude(O),  airspeed(O) ] ) 

slope_landing, 

land(slope),  altitude(O),  airspeed( 0 ) ] ) . 

steep_appr oach , 
land(steep),  altitude(O),  airspeed( 0 ) 3 ) . 

high_speed_appraacn  f 
high_speed),  altitude(O),  airspeed* 0 ) J ) . 

max_weight_landing/ 
max_weight ) ,    altitude(O),  airspeed ( 0 )}) . 

3liding__landing, 
sliding),  altitude! 0) ,  airspeed ( 0 )]) . 

pos  _land  ing_3ucranked , 

[ land (pos ) 3 ) . 

30s_landingl7 
land! pos )»  altitude! 0),  airspeed { 0 ) 3 ) . 

pos_landing2, 
land(pos),    altitude(O),   airspeed ( 0 ) J ) 

pract_landing, 
land(pract),  altitude(O),  airspeed( 0 ) ] ) . 


addpostcondition(  pract_landing_outrankedl, 

[ land (pr act ) ]  )  . 
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/*<<<<<<<<<<<<<<<<<<<<  PRIORITY  SETS  >>>>>>>>>>>>>>>>>>>>*/ 

/*  These  sets  define  the   relative   priority  among   its 
elements.   If   an  element   of  a  higher   priority  has   been 
asserted   as   a   goal   no  lower  priority   elements   will   be 
asserted . 
*/ 

priority_set ( I  failed (engl ) ,  off(engl)]). 

prior ity_set( {  failed (eng2 ) ,  off(eng2)l). 

prior ity_set ( [ landipos ) ,  land (pr act ) } ) . 

pr ior i ty_set ( i land (slope ) ,  land ( high_speed ) , 

land(max_weight ) ,   land(sliding) ,    iand(steep), 
land( normal ) ] ) . 

prior ity_set( [ power i none ) ,    power (low),   power (deer 3ase ) , 
power ( increase ) ] } . 

prior  it  y_set  (  [power  f  none  )  ,„  power  ( low),  oower(ok)3). 
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/*<<<<<<<<<<<<<<<<<<<<  test  cases  >>>>>>>>>>>>>>>>>>>>*/ 

/*     testl  normal  state  */ 

testKOplist, Goalstate )  :-    problem_solver 

(  t  revs ( rotor ,ok ) ,  full(fuel),  engaged ( seas ) ,  on(ecu), 
of f (rain_rmv),  of f (master_arm) ,  landing_zone (clear ) , 
full(throttlel) ,  f ull( throttle2) ,  of f (master_caution) , 
automat ic(govl)/  automat ic ( gov2 ) ,  on(fuell),  on(fuel2), 
normal ( fuel  jpress ) ,  torque (engl, ok ) ,  torque (eng2, ok ) , 
torque (xmsn, ok ) ,  revs (ngl, ok ) ,  revs(ng2, ok ) ,  revs (nf 1, ok ) , 
revs( nf 2, ok ) ,  oil_temp(engl,ok ) ,  oil_temp(eng2/ ok ) , 
oil_press(engl,ok ) ,  oil_press(eng2, ok ) ,  on(genl),  on(gen2), 
oil_temp(c_box,ok ) ,  oil_press(c_box,ok ) ,  oil_temp(xmsn,ok ) , 
oil_press (xmsn, ok ) ,  ammeter (genl, ok ) ,  ammeter (gen2, ok ) , 
f uel_press (ok ) ,  itt (englr ok ) ,  itt (eng2,ok ) , 

oil_press ( hyd_sys_l,ok ) r  oil_press (hyd_sys_2 , ok ) , 

airspeed(lOO) ,  alt itude( 1000 )] , 

Oplist,  Goalstate  ).  /*  final  state  and  how  we  got  there  */ 

/*  test2  dual  eng  failure  */ 

test2 (Oplist , Goalstate )  :-    problem_solver 

(    t    oll_press (engl, none ) ,    oil_press(eng2,none) 
revs(rotor , low) ,        of f (rain_rmv) ,  of f (master_arm) 

landing_zone (clear ) ,  f ull ( throttlel) ,  f ull ( throttle2) 
of f (master_caution) ,  automatic ( govl ) ,     automat ic ( gov2 ) 

ontfuell),  on(fuel2)/  normal ( fuel_press ) ,  torque (engl, none ) 
torque (eng2, none ) ,  torque (xmsn, low) ,  revs (ngl, none ) 
revs (ng2, none ) ,  revs( nf l,none) ,  revs(nf 2, none ) 
oil_temp(engl,ok ) ,  oil_temp(eng2,ok ) ,  failed(genl) 
failed(gen2) ,  full(fuel),  off(scas),  on(ecu) 
oil_temp(c_box,ok ) ,  oil_press (c_box,ok ) ,  oil_temp(xmsn, ok ) 
oll_press ( xmsn, ok ) ,  ammeter ( genl, none ) , ammeter ( gen 2, none ) 
f uel_press (ok ) ,  itt (engl, none ) ,  itt (eng2, none ) 
oil_press(hyd_sys_l,  ok ) ,  oil_press ( hyd_sys_2,ok ) 

airspeed(lOO),  altitude (1000) ,  left_yaw  ), 

Oplist,  Goalstate  ).   /*  final  state  and  how  we  got  there  */ 


/*  test3  single  eng  failure  */ 

test3(Oplist, Goalstate)  :-   problem_solver 

( loil_press(engl,none ) ,  oll_press(eng2,ok ) ,  revs (rotor, low) , 
of f (rain_rmv) ,      of f (master_arm) ,      landing_zone (clear ) , 
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£ull(throttlel),  £ull( throttle2) ,  of £(master_cautlon) 
automatic(govl),  automat 1c ( gov2 ) ,  on(fuell),  on(£uel2) 
normal ( fuel jpress  ) ,  torque(engl,none ) ,  torque(eng2,ok ) 
torque (xmsn, low) ,  revs (ngl, none ) ,  revs(ng2,ok) 
revs (nfl, none ) ,  revs(nf 2,ok ) ,  oil_temp(engl,ok ) 
oil_temp(eng2, ok ) ,  fai led ( genl ) ,  full(fuel),  off(scas) 
on(ecu),  oil_temp(c_box,ok ) ,  oil_press(c_box,ok ) 
oil_temp(xmsn,ok ) ,  oil_press(xmsn,ok ) ,  ammeter (genl, none) 
ammeter (gen2, ok) ,  £uel_press(ok ) ,  itt (engl,none) 
itt(eng2,ok ) ,  oil_press (hyd_sys_l,ok ) 

oiljpress(hyd_sys_2,ok) ,  airspced( 100 ) ,  altitude ( 1000 ) 
left_yaw  J, 

Oplist,  Goalstate  ) .   /*  final  state  and  how  we  got  there  */ 

/*  test4  single  engl  failure  +  nf2  gov  failure  */ 

test4 (Oplist, Goalstate )  :-   problem_solver 

( ( oil_press (engl, none ) ,  oi l_press (eng2,ok ) ,  revs ( rotor , low) 
off ( rain_rmv) ,  of f ( master _arm) ,  landing_zone (clear ) 
full(throttlel) ,  f ull ( throttle2 ) ,  of f (master_caut ion ) 
automatic(govl ) ,  automatic(gov2 ) ,  on(fuell),  on(fuel2) 
normal ( ruel_press ) ,  torque (engl, none ) ,  torque ( eng2 , erratic  ) 
torque ( xmsn, low) ,  torque ( xmsn, erratic ) ,  revs ( ngl, none ) 
revs (ng2 , erratic ) ,  revs ( nfl, none ) ,  revs ( nf 2, erratic ) 
oil_temp<engl, ok ) ,  oil_temp(eng2, ok ) ,  failed(genl) 
full(fuel),  off(scas),  on(ecu),  oil_temp(c_box,ok ) 
oil_press(c_box,ok ) ,  oil_temp(xmsn,ok ) ,  oil_press(xmsn,ok ) 
ammeter (genl, none),  ammeter (gen2, ok ) ,  fuel_press(  ok  ) 
itt(engl,none ) ,  itt (eng2, erratic) ,  oil_press (hyd_sys_l,ok ) 
oil_press(hyd_sys_2,ok),  airspeed( 100 ) ,  altitude( 1000) 
lef t_yaw  ] , 

Oplist,  Goalstate  ).   /*  final  state  and  how  we  got  there  */ 
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